<PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />

Org.BouncyCastle.Pkix.INameConstraintHostName

The canonical-form contract shared by the string-host name-constraint wrapper types whose subtree set algebra is the common host-name algebra (see the Relate/Intersect/Union methods of NameConstraintUtilities): NameConstraintEmail, NameConstraintUri and NameConstraintDns (which classifies everything as one fixed Domain - every dNSName denotes a subtree).
string Host { get; }

The derived host comparand (for the address kinds, the part after the first '@').

The shape classification, fixed at construction.

string Value { get; }

The canonical string - the identity.