Add name constraints to subordinate CA certificates.
Added OpenSSL configuration file for the subordinate CA.