http://www.bouncycastle.org/java.html: The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.
  • The Legion of the Bouncy Castle Inc. 
package org.bouncycastle.asn1.x509;

public interface NameConstraintValidator
{
    void checkPermitted(GeneralName name)
        throws NameConstraintValidatorException;

    void checkExcluded(GeneralName name)
            throws NameConstraintValidatorException;

    void intersectPermittedSubtree(GeneralSubtree permitted);

    void intersectPermittedSubtree(GeneralSubtree[] permitted);

    void intersectEmptyPermittedSubtree(int nameType);

    void addExcludedSubtree(GeneralSubtree subtree);
}