pub const CERT_END_ENTITY_SUBJECT_FLAG: u32 = 64u32;