Enhanced DNS Name Constraints algorithm to take into account a leading dot in some CAs base constraint similarly to the mozilla:pkix implementation.