Better tests for GeneralNames
Better tests for GeneralNames

- Explicitly call out where there are no real checks
- Handle .<fqdn> case for name constraints

awslabs/certlint,awslabs/certlint,awslabs/certlint