certificates/authority/internal/constraints
..
constraints.go
constraints_test.go
verify.go