pub const CERT_TRUST_INVALID_NAME_CONSTRAINTS: u32 = 2048u32;