D0Sf3T

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A flaw exists where X.509 name constraints can be bypassed when the Subject Common Name is treated as a DNS-type name. This allows a certificate to be accepted even if its Subject Common Name violates the DNS name constraints established by the issuing Certificate Authority (CA). X.509 is a standard for public key infrastructure that defines the format of digital certificates. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.