[bostik]

Does this actually work now? A name-constrained CA (or even its CSR) used to break things in absolutely hilarious ways.