Initial support for name constraints certificate extension.