OpenSSL is able to generate a certificate with name constraints with any possible