// Expired results when a certificate has expired, based on the time
	// given in the VerifyOptions.
	Expired
	// CANotAuthorizedForThisName results when an intermediate or root
	// certificate has a name constraint which doesn't permit a DNS or
	// other name (including IP address) in the leaf certificate.
	CANotAuthorizedForThisName
	// TooManyIntermediates results when a path length constraint is
	// violated.
	TooManyIntermediates

	}
}

func expectNameConstraintsError(t *testing.T, err error) {
	if inval, ok := err.(CertificateInvalidError); !ok || inval.Reason != CANotAuthorizedForThisName {
		t.Fatalf("error was not a CANotAuthorizedForThisName: %v", err)
	}
}

func expectNotAuthorizedError(t *testing.T, err error) {
	if inval, ok := err.(CertificateInvalidError); !ok || inval.Reason != NotAuthorizedToSign {

		{"(SystemRootsError).Unwrap", Method, 16},
		{"(UnhandledCriticalExtension).Error", Method, 0},
		{"(UnknownAuthorityError).Error", Method, 0},
		{"CANotAuthorizedForExtKeyUsage", Const, 10},
		{"CANotAuthorizedForThisName", Const, 0},
		{"CertPool", Type, 0},
		{"Certificate", Type, 0},
		{"Certificate.AuthorityKeyId", Field, 0},
		{"Certificate.BasicConstraintsValid", Field, 0},

pkg crypto/tls, type ConnectionState struct, ServerName string
pkg crypto/tls, type ConnectionState struct, VerifiedChains [][]*x509.Certificate
pkg crypto/x509, const CANotAuthorizedForThisName InvalidReason
pkg crypto/x509, const DSA PublicKeyAlgorithm
pkg crypto/x509, const DSAWithSHA1 SignatureAlgorithm
pkg crypto/x509, const DSAWithSHA256 SignatureAlgorithm
pkg crypto/x509, const Expired InvalidReason

pkg crypto/tls, type Config struct, SessionTicketKey [32]uint8
pkg crypto/tls, type Config struct, SessionTicketsDisabled bool
pkg crypto/tls, type ConnectionState struct, DidResume bool
pkg crypto/x509, const CANotAuthorizedForThisName = 2
pkg crypto/x509, const DSA = 2
pkg crypto/x509, const DSAWithSHA1 = 7
pkg crypto/x509, const DSAWithSHA256 = 8
pkg crypto/x509, const ECDSA = 3
pkg crypto/x509, const ECDSA PublicKeyAlgorithm