           &amp;needed_rights);</code></pre>

<h1 id="NOTES">NOTES</h1>

<p>To this date, it seems that proxy certificates have only been used in environments that are aware of them, and no one seems to have investigated how they can be used or misused outside of such an environment.</p>

<p>For that reason, OpenSSL requires that applications aware of proxy certificates must also make that explicit.</p>

<p><b>subjectAltName</b> and <b>issuerAltName</b> are forbidden in proxy certificates, and this is enfor