<PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />

Org.BouncyCastle.Pkix.NameConstraintRelation

The set relationship of one string-host name-constraint value to another, as classified by the Relate extension in NameConstraintUtilities. Because a host/mailbox is a single point and a domain is a subtree, two such constraints never partially overlap - the relationship is always exactly one of these four.

The two share no names.

Equal = 0

The two match the same set of names.

The first is strictly contained by the second (the first is the narrower constraint).

The first strictly contains the second (the first is the broader constraint).