const PERMITTED_SUBTREE: &str = "localhost";Expand description
The one name this authority may vouch for, plus everything under it. Written into the certificate as an RFC 5280 name constraint, so a verifier enforces it rather than taking this module’s word for it.