est31

There is new work on this topic: https://internals.rust-lang.org/t/pre-rfc-procmacros-implemented-in-wasm/10860

Bit :+1: from me. This would allow for `expr.unwrap_or!(return)` which I wanted to do so often but couldn't (as well as `expr.unwrap_or!(continue)`).

cc @infinity0 Rust Debian packager and @cuviper Rust Fedora packager

@bnoordhuis it seems to fix #135, but it still gives me an UnknownIssuer error when I try it [on my rcgen test](https://github.com/est31/rcgen/blob/281636454a03a293a92704f5eb091e8ff1233e45/tests/webpki.rs#L239). Even if I don't pass the empty `DirectoryName`...

@briansmith I've read your proposal and I generally like the idea of supporting negative serials, even though the spec forbids them. But I'm a bit critical of the proposal to...

@briansmith yeah I understand, and I read up extra on how integer DER/BER encoding works (two's complement) before I wrote the comment you replied to. My argument still holds if...

> even better, we can use Chromium and/or Firefox test data to see what we need to change. I've skimmed Firefox test code for example certificates, apparently they use the...

> Rather than have a test case based on what OpenSSL and BouncyCastle generate, it would be better to see an example for a real-world certificate from a publicly-trusted CA....

I've ran another scan over the argon 2021 CT log, scanning 9.5 million certificates as they came in, roughly over a span of 1 day. I've found two more occurrences...

Found some more uses of the NameConstraints extension. Both use implicit tagging: * https://crt.sh/?id=12729421 "Intel External Issuing CA 7B" * https://crt.sh/?id=12728830 "Intel External Issuing CA 7A" So far it's only...