----- Certificate i=0 (CN=Valid DN and RFC822 nameConstraints EE Certificate Test27,OU=permittedSubtree1,O=Test Certificates 2011,C=US) -----
ERROR: Not permitted by name constraints