----- Certificate i=0 (1.2.840.113549.1.9.1=#546573743239454540696E76616C69646365727469666963617465732E676F76,CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US) -----
ERROR: Not permitted by name constraints