Hacker News new | ask | show | jobs
by grhmc 3902 days ago
Yes using "Name Constraints" but that RFC / extension is really broken, and implementations don't support it. See 4.2.1.10 of https://tools.ietf.org/html/rfc5280.