From f48ba6d020d7ed6cb3447c1e16540be6307c0ddb Mon Sep 17 00:00:00 2001
From: GitHub <actions@github.com>
Date: Mon, 2 Nov 2026 18:26:38 +0000
Subject: [PATCH] docs: update gotd docs to the latest version

---
 imp/builtin.error^ca00f.html                  |    8 +-
 imp/context.stringer^0a960.html               |    2 +-
 imp/crypto/x509.CertificateInvalidError.html  |    2 +-
 imp/crypto/x509.HostnameError.html            |    2 +-
 imp/crypto/x509.SystemRootsError.html         |    2 +-
 imp/crypto/x509.UnknownAuthorityError.html    |    2 +-
 imp/crypto/x509.rfc2821Mailbox^1cdc3.html     |    2 +-
 imp/encoding/binary.bigEndian^1e7dc.html      |    8 +-
 imp/encoding/binary.littleEndian^40d0b.html   |    8 +-
 imp/encoding/binary.nativeEndian^61760.html   |    8 +-
 imp/fmt.Stringer.html                         |    2 +-
 imp/github.com/go-faster/errors.Wrapper.html  |    2 +-
 imp/golang.org/x/sys/cpu.bigEndian^1e7dc.html |    8 +-
 imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html |    4 +-
 .../x/sys/cpu.littleEndian^40d0b.html         |    8 +-
 imp/runtime.stringer^0a960.html               |    2 +-
 .../golang.org/x/sys/cpu.bigEndian^1e7dc.html |    8 +-
 .../golang.org/x/sys/cpu.byteOrder^5f5cc.html |    4 +-
 .../x/sys/cpu.littleEndian^40d0b.html         |    8 +-
 index.html                                    |    4 +-
 pkg/crypto/x509.html                          |  202 +-
 pkg/golang.org/x/sys/cpu.html                 |   14 +-
 pkg/vendor/golang.org/x/sys/cpu.html          |   14 +-
 src/crypto/tls/common.go.html                 |   14 +-
 src/crypto/tls/conn.go.html                   |    2 +-
 src/crypto/tls/handshake_client.go.html       |   38 +-
 src/crypto/tls/handshake_server.go.html       |   26 +-
 src/crypto/tls/handshake_server_tls13.go.html |    8 +-
 src/crypto/x509/constraints.go.html           |   34 +-
 src/crypto/x509/parser.go.html                |    2 +-
 src/crypto/x509/root_unix.go.html             |    2 +-
 src/crypto/x509/verify.go.html                | 2781 +++++++++--------
 .../refraction-networking/utls/common.go.html |    2 +-
 .../refraction-networking/utls/conn.go.html   |    2 +-
 .../utls/handshake_client.go.html             |   38 +-
 .../utls/handshake_server.go.html             |   20 +-
 src/net/cgo_linux.go.html                     |    2 +-
 src/net/cgo_resnew.go.html                    |    2 +-
 src/net/cgo_socknew.go.html                   |    2 +-
 src/net/cgo_unix_cgo.go.html                  |    2 +-
 src/net/cgo_unix_cgo_res.go.html              |    2 +-
 src/runtime/cgo/cgo.go.html                   |    2 +-
 statistics.html                               |   10 +-
 use/bytes..Contains.html                      |    2 +-
 use/bytes..Equal.html                         |   10 +-
 use/crypto..PublicKey.html                    |    2 +-
 use/crypto/sha256..Sum256.html                |    3 +-
 .../x509..CANotAuthorizedForExtKeyUsage.html  |    6 +-
 .../x509..CANotAuthorizedForThisName.html     |    8 +-
 use/crypto/x509..CertPool.cert^06298.html     |    2 +-
 use/crypto/x509..CertPool.contains^beeb2.html |    2 +-
 .....CertPool.findPotentialParents^21ad5.html |    4 +-
 use/crypto/x509..CertPool.html                |    4 +-
 use/crypto/x509..CertPool.len^71fa9.html      |    4 +-
 .../x509..CertPool.systemPool^6c282.html      |    4 +-
 ...09..Certificate.BasicConstraintsValid.html |    4 +-
 .../x509..Certificate.CheckSignatureFrom.html |    2 +-
 use/crypto/x509..Certificate.DNSNames.html    |    8 +-
 use/crypto/x509..Certificate.ExtKeyUsage.html |    6 +-
 use/crypto/x509..Certificate.Extensions.html  |    4 +-
 use/crypto/x509..Certificate.IPAddresses.html |   10 +-
 .../x509..Certificate.InhibitAnyPolicy.html   |    4 +-
 ...509..Certificate.InhibitAnyPolicyZero.html |    2 +-
 ...509..Certificate.InhibitPolicyMapping.html |    4 +-
 ....Certificate.InhibitPolicyMappingZero.html |    2 +-
 use/crypto/x509..Certificate.IsCA.html        |    2 +-
 use/crypto/x509..Certificate.MaxPathLen.html  |    4 +-
 use/crypto/x509..Certificate.NotAfter.html    |    4 +-
 use/crypto/x509..Certificate.NotBefore.html   |    4 +-
 use/crypto/x509..Certificate.Policies.html    |    4 +-
 .../x509..Certificate.PolicyMappings.html     |    4 +-
 use/crypto/x509..Certificate.PublicKey.html   |    2 +-
 use/crypto/x509..Certificate.Raw.html         |    4 +-
 use/crypto/x509..Certificate.RawIssuer.html   |    4 +-
 use/crypto/x509..Certificate.RawSubject.html  |    6 +-
 .....Certificate.RawSubjectPublicKeyInfo.html |    5 +-
 ...09..Certificate.RequireExplicitPolicy.html |    4 +-
 ...Certificate.RequireExplicitPolicyZero.html |    4 +-
 .../x509..Certificate.SerialNumber.html       |    2 +-
 use/crypto/x509..Certificate.Subject.html     |    8 +-
 ...rtificate.UnhandledCriticalExtensions.html |    2 +-
 .../x509..Certificate.UnknownExtKeyUsage.html |    2 +-
 use/crypto/x509..Certificate.Verify.html      |    4 +-
 .../x509..Certificate.VerifyHostname.html     |    6 +-
 .../x509..Certificate.buildChains^bda2f.html  |    8 +-
 ...09..Certificate.hasSANExtension^e70a1.html |    2 +-
 use/crypto/x509..Certificate.html             |   41 +-
 .../x509..Certificate.isValid^5339b.html      |    8 +-
 .../x509..Certificate.systemVerify^8b54b.html |    4 +-
 .../x509..CertificateInvalidError.Cert.html   |    8 +-
 .../x509..CertificateInvalidError.Detail.html |   20 +-
 .../x509..CertificateInvalidError.Error.html  |    4 +-
 .../x509..CertificateInvalidError.Reason.html |   10 +-
 use/crypto/x509..CertificateInvalidError.html |   22 +-
 use/crypto/x509..Expired.html                 |   10 +-
 use/crypto/x509..ExtKeyUsage.html             |    8 +-
 use/crypto/x509..ExtKeyUsageAny.html          |    4 +-
 use/crypto/x509..ExtKeyUsageServerAuth.html   |    2 +-
 .../x509..HostnameError.Certificate.html      |    6 +-
 use/crypto/x509..HostnameError.Error.html     |    4 +-
 use/crypto/x509..HostnameError.Host.html      |   18 +-
 use/crypto/x509..HostnameError.html           |   10 +-
 use/crypto/x509..IncompatibleUsage.html       |    8 +-
 use/crypto/x509..InvalidReason.html           |    8 +-
 .../x509..NameConstraintsWithoutSANs.html     |    6 +-
 use/crypto/x509..NameMismatch.html            |    8 +-
 use/crypto/x509..NoValidChains.html           |    8 +-
 use/crypto/x509..NotAuthorizedToSign.html     |    8 +-
 use/crypto/x509..OID.Equal.html               |    8 +-
 use/crypto/x509..OID.der^5050d.html           |   44 +-
 use/crypto/x509..OID.html                     |   28 +-
 use/crypto/x509..OIDFromInts.html             |    2 +-
 ...509..PolicyMapping.IssuerDomainPolicy.html |    6 +-
 ...09..PolicyMapping.SubjectDomainPolicy.html |    4 +-
 use/crypto/x509..SystemRootsError.Err.html    |    2 +-
 use/crypto/x509..SystemRootsError.Error.html  |    4 +-
 use/crypto/x509..SystemRootsError.Unwrap.html |    4 +-
 use/crypto/x509..SystemRootsError.html        |   10 +-
 use/crypto/x509..TooManyConstraints.html      |    4 +-
 use/crypto/x509..TooManyIntermediates.html    |    8 +-
 use/crypto/x509..UnconstrainedName.html       |    6 +-
 .../x509..UnhandledCriticalExtension.html     |    2 +-
 .../x509..UnknownAuthorityError.Cert.html     |    4 +-
 .../x509..UnknownAuthorityError.Error.html    |    4 +-
 ....UnknownAuthorityError.hintCert^e462c.html |   12 +-
 .....UnknownAuthorityError.hintErr^178d1.html |    8 +-
 use/crypto/x509..UnknownAuthorityError.html   |    8 +-
 ...09..VerifyOptions.CertificatePolicies.html |    6 +-
 .../x509..VerifyOptions.CurrentTime.html      |    6 +-
 use/crypto/x509..VerifyOptions.DNSName.html   |    8 +-
 .../x509..VerifyOptions.Intermediates.html    |   10 +-
 use/crypto/x509..VerifyOptions.KeyUsages.html |   12 +-
 ...rifyOptions.MaxConstraintComparisions.html |    4 +-
 use/crypto/x509..VerifyOptions.Roots.html     |   20 +-
 use/crypto/x509..VerifyOptions.html           |   12 +-
 ....VerifyOptions.inhibitAnyPolicy^4b16e.html |    6 +-
 ...ifyOptions.inhibitPolicyMapping^6a40d.html |    6 +-
 ...fyOptions.requireExplicitPolicy^cb405.html |    6 +-
 use/crypto/x509..alreadyInChain^b3059.html    |    6 +-
 use/crypto/x509..anyPolicyOID^08ed8.html      |   32 +-
 .../x509..appendToFreshChain^6b596.html       |    8 +-
 .../x509..checkChainConstraints^a0291.html    |    2 +-
 .../x509..checkChainForKeyUsage^29417.html    |    6 +-
 ...509..containsDistrustedSPKIHash^66387.html |   24 +
 .../x509..distrustedSPKIHashes^39e5c.html     |   24 +
 .../x509..domainToReverseLabels^c4083.html    |    6 +-
 use/crypto/x509..errNotParsed^5d726.html      |    8 +-
 use/crypto/x509..errSignatureLimit^ae435.html |    8 +-
 .../x509..intermediateCertificate^859b0.html  |   12 +-
 use/crypto/x509..leafCertificate^dccda.html   |    6 +-
 use/crypto/x509..matchExactly^dd43f.html      |    6 +-
 use/crypto/x509..matchHostnames^1fee7.html    |    8 +-
 .../x509..maxChainSignatureChecks^d9aa7.html  |    6 +-
 .../x509..mustNewOIDFromInts^88765.html       |    6 +-
 .../x509..newPolicyGraphNode^07eb8.html       |   10 +-
 use/crypto/x509..newPolicyGraph^76d81.html    |    6 +-
 ...509..oidExtensionSubjectAltName^82325.html |    4 +-
 .../x509..parseRFC2821Mailbox^e4401.html      |    4 +-
 use/crypto/x509..policiesValid^aeb80.html     |    6 +-
 ....policyGraphNode^5c8b0.children^10910.html |   18 +-
 ...aphNode^5c8b0.expectedPolicySet^295e3.html |   16 +-
 use/crypto/x509..policyGraphNode^5c8b0.html   |   56 +-
 .....policyGraphNode^5c8b0.parents^6ce83.html |   20 +-
 ...licyGraphNode^5c8b0.validPolicy^d78cb.html |   18 +-
 ...9..policyGraph^f0ba7.deleteLeaf^91490.html |    6 +-
 .../x509..policyGraph^f0ba7.depth^ded32.html  |   34 +-
 use/crypto/x509..policyGraph^f0ba7.html       |   28 +-
 ...09..policyGraph^f0ba7.incrDepth^156cd.html |    6 +-
 .../x509..policyGraph^f0ba7.insert^1e225.html |   10 +-
 ...olicyGraph^f0ba7.leafWithPolicy^49982.html |   10 +-
 .../x509..policyGraph^f0ba7.leaves^5ed0a.html |    6 +-
 .....policyGraph^f0ba7.parentIndex^b7264.html |   10 +-
 ...Graph^f0ba7.parentWithAnyPolicy^deed2.html |    6 +-
 ...Graph^f0ba7.parentsWithExpected^a1913.html |    6 +-
 ...x509..policyGraph^f0ba7.parents^6ce83.html |    6 +-
 .../x509..policyGraph^f0ba7.prune^6c831.html  |    8 +-
 .../x509..policyGraph^f0ba7.strata^82ba7.html |   30 +-
 ...icyGraph^f0ba7.validPolicyNodes^22d86.html |    6 +-
 ...509..potentialParent^28fb8.cert^06298.html |   16 +-
 ...otentialParent^28fb8.constraint^bd00a.html |    4 +-
 use/crypto/x509..potentialParent^28fb8.html   |    4 +-
 .../x509..rfc2821Mailbox^1cdc3.String.html    |    4 +-
 ...09..rfc2821Mailbox^1cdc3.domain^f2ff8.html |    8 +-
 use/crypto/x509..rfc2821Mailbox^1cdc3.html    |    8 +-
 ...509..rfc2821Mailbox^1cdc3.local^25bf8.html |    8 +-
 use/crypto/x509..rootCertificate^fc5b1.html   |   10 +-
 use/crypto/x509..splitHostname^87988.html     |    8 +-
 use/crypto/x509..systemRootsErr^bb588.html    |    2 +-
 use/crypto/x509..systemRootsPool^17bcc.html   |    4 +-
 use/crypto/x509..toLowerCaseASCII^66bdf.html  |   12 +-
 .../x509..validHostnameInput^1c66a.html       |    6 +-
 .../x509..validHostnamePattern^b6154.html     |    6 +-
 use/crypto/x509..validHostname^6f68b.html     |    8 +-
 use/crypto/x509/pkix..Extension.Id^12156.html |    4 +-
 use/crypto/x509/pkix..Extension.Value.html    |    2 +-
 use/crypto/x509/pkix..Extension.html          |    4 +-
 use/crypto/x509/pkix..Name.CommonName.html    |    4 +-
 use/crypto/x509/pkix..Name.Organization.html  |    4 +-
 .../asn1..ObjectIdentifier.Equal.html         |    4 +-
 use/encoding/hex..EncodeToString.html         |    3 +-
 use/errors..New.html                          |    6 +-
 use/fmt..Errorf.html                          |    2 +-
 use/fmt..Sprintf.html                         |   20 +-
 .../x/sys/cpu..byteOrder^5f5cc.Uint32.html    |   10 +-
 .../x/sys/cpu..byteOrder^5f5cc.Uint64.html    |   10 +-
 .../x/sys/cpu..option^a11a7.Enable.html       |   16 +-
 .../x/sys/cpu..option^a11a7.Feature.html      |  100 +-
 .../x/sys/cpu..option^a11a7.Name.html         |  102 +-
 .../x/sys/cpu..option^a11a7.Required.html     |   12 +-
 .../x/sys/cpu..option^a11a7.Specified.html    |   12 +-
 use/iter..Seq.html                            |    2 +-
 use/maps..Clone.html                          |    2 +-
 use/maps..Values.html                         |    2 +-
 use/math/big..Int.String.html                 |    2 +-
 use/net..IP.Equal.html                        |    2 +-
 use/net..IP.String.html                       |    2 +-
 use/net..ParseIP.html                         |    4 +-
 use/runtime..GOOS.html                        |    2 +-
 use/slices..DeleteFunc.html                   |    2 +-
 use/strings..Builder.Len.html                 |    4 +-
 use/strings..Builder.String.html              |    2 +-
 use/strings..Builder.WriteString.html         |    6 +-
 use/strings..Builder.html                     |    2 +-
 use/strings..Count.html                       |    2 +-
 use/strings..Join.html                        |    4 +-
 use/strings..LastIndexByte.html               |    2 +-
 use/strings..Split.html                       |    6 +-
 use/strings..TrimSuffix.html                  |    4 +-
 use/time..Now.html                            |    2 +-
 use/time..RFC3339.html                        |    4 +-
 use/time..Time.After.html                     |    2 +-
 use/time..Time.Before.html                    |    2 +-
 use/time..Time.Format.html                    |    4 +-
 use/time..Time.IsZero.html                    |    2 +-
 use/time..Time.html                           |    2 +-
 use/unicode/utf8..RuneError.html              |    2 +-
 .../x/sys/cpu..byteOrder^5f5cc.Uint32.html    |   10 +-
 .../x/sys/cpu..byteOrder^5f5cc.Uint64.html    |   10 +-
 .../x/sys/cpu..option^a11a7.Enable.html       |   16 +-
 .../x/sys/cpu..option^a11a7.Feature.html      |  100 +-
 .../x/sys/cpu..option^a11a7.Name.html         |  102 +-
 .../x/sys/cpu..option^a11a7.Required.html     |   12 +-
 .../x/sys/cpu..option^a11a7.Specified.html    |   12 +-
 243 files changed, 2676 insertions(+), 2565 deletions(-)
 create mode 100644 use/crypto/x509..containsDistrustedSPKIHash^66387.html
 create mode 100644 use/crypto/x509..distrustedSPKIHashes^39e5c.html

diff --git a/imp/builtin.error^ca00f.html b/imp/builtin.error^ca00f.html
index 29fc3e32cc0..c7b67f92e27 100644
--- a/imp/builtin.error^ca00f.html
+++ b/imp/builtin.error^ca00f.html
@@ -25,13 +25,13 @@
 		*crypto/tls.<a href="../pkg/crypto/tls.html#name-CertificateVerificationError">CertificateVerificationError</a>.<b><a href="../src/crypto/tls/common.go.html#line-1816">Error</a></b>
 		*crypto/tls.<a href="../pkg/crypto/tls.html#name-ECHRejectionError">ECHRejectionError</a>.<b><a href="../src/crypto/tls/ech.go.html#line-501">Error</a></b>
 		crypto/tls.<a href="../pkg/crypto/tls.html#name-RecordHeaderError">RecordHeaderError</a>.<b><a href="../src/crypto/tls/conn.go.html#line-578">Error</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-CertificateInvalidError">CertificateInvalidError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-72">Error</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-CertificateInvalidError">CertificateInvalidError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-74">Error</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-ConstraintViolationError">ConstraintViolationError</a>.<b><a href="../src/crypto/x509/x509.go.html#line-909">Error</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-HostnameError">HostnameError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-109">Error</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-HostnameError">HostnameError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-111">Error</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-InsecureAlgorithmError">InsecureAlgorithmError</a>.<b><a href="../src/crypto/x509/x509.go.html#line-900">Error</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-SystemRootsError">SystemRootsError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-177">Error</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-SystemRootsError">SystemRootsError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-179">Error</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-UnhandledCriticalExtension">UnhandledCriticalExtension</a>.<b><a href="../src/crypto/x509/x509.go.html#line-1054">Error</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-UnknownAuthorityError">UnknownAuthorityError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-156">Error</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-UnknownAuthorityError">UnknownAuthorityError</a>.<b><a href="../src/crypto/x509/verify.go.html#line-158">Error</a></b>
 		encoding/asn1.<a href="../pkg/encoding/asn1.html#name-StructuralError">StructuralError</a>.<b><a href="../src/encoding/asn1/asn1.go.html#line-44">Error</a></b>
 		encoding/asn1.<a href="../pkg/encoding/asn1.html#name-SyntaxError">SyntaxError</a>.<b><a href="../src/encoding/asn1/asn1.go.html#line-51">Error</a></b>
 		encoding/base64.<a href="../pkg/encoding/base64.html#name-CorruptInputError">CorruptInputError</a>.<b><a href="../src/encoding/base64/base64.go.html#line-303">Error</a></b>
diff --git a/imp/context.stringer^0a960.html b/imp/context.stringer^0a960.html
index d6baaaf795d..01c03797542 100644
--- a/imp/context.stringer^0a960.html
+++ b/imp/context.stringer^0a960.html
@@ -2960,7 +2960,7 @@
 		*crypto/ecdh.<a href="../pkg/crypto/ecdh.html#name-x25519Curve">x25519Curve</a>.<b><a href="../src/crypto/ecdh/x25519.go.html#line-33">String</a></b>
 		crypto/tls.<a href="../pkg/crypto/tls.html#name-alert">alert</a>.<b><a href="../src/crypto/tls/alert.go.html#line-101">String</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-parsedURI">parsedURI</a>.<b><a href="../src/crypto/x509/constraints.go.html#line-573">String</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-256">String</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-258">String</a></b>
 		*embed.<a href="../pkg/embed.html#name-file">file</a>.<b><a href="../src/embed/embed.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-bigEndian">bigEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-148">String</a></b>
diff --git a/imp/crypto/x509.CertificateInvalidError.html b/imp/crypto/x509.CertificateInvalidError.html
index 1b80c9543a5..a2b55c08b0d 100644
--- a/imp/crypto/x509.CertificateInvalidError.html
+++ b/imp/crypto/x509.CertificateInvalidError.html
@@ -8,7 +8,7 @@
 <link href="../../css/auto-v0.8.5.css" rel="stylesheet">
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
-<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
+<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
 
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
diff --git a/imp/crypto/x509.HostnameError.html b/imp/crypto/x509.HostnameError.html
index ebe8fd892ed..2804ce0135d 100644
--- a/imp/crypto/x509.HostnameError.html
+++ b/imp/crypto/x509.HostnameError.html
@@ -8,7 +8,7 @@
 <link href="../../css/auto-v0.8.5.css" rel="stylesheet">
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
-<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
+<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
 
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
diff --git a/imp/crypto/x509.SystemRootsError.html b/imp/crypto/x509.SystemRootsError.html
index f4c5ca33a2e..da3fe7f3d68 100644
--- a/imp/crypto/x509.SystemRootsError.html
+++ b/imp/crypto/x509.SystemRootsError.html
@@ -8,7 +8,7 @@
 <link href="../../css/auto-v0.8.5.css" rel="stylesheet">
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
-<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
+<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
 
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
diff --git a/imp/crypto/x509.UnknownAuthorityError.html b/imp/crypto/x509.UnknownAuthorityError.html
index 9ab263d1ca6..a2376712c52 100644
--- a/imp/crypto/x509.UnknownAuthorityError.html
+++ b/imp/crypto/x509.UnknownAuthorityError.html
@@ -8,7 +8,7 @@
 <link href="../../css/auto-v0.8.5.css" rel="stylesheet">
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
-<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
+<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
 
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
diff --git a/imp/crypto/x509.rfc2821Mailbox^1cdc3.html b/imp/crypto/x509.rfc2821Mailbox^1cdc3.html
index 3697e45131a..5faa7c4fb92 100644
--- a/imp/crypto/x509.rfc2821Mailbox^1cdc3.html
+++ b/imp/crypto/x509.rfc2821Mailbox^1cdc3.html
@@ -8,7 +8,7 @@
 <link href="../../css/auto-v0.8.5.css" rel="stylesheet">
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
-<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
+<pre><code><span style="font-size:x-large;">type <a href="../../pkg/crypto/x509.html">crypto/x509</a>.<b><a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a></b></span><span style="font-size:large;"> <i>(struct)</i></span>
 
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
diff --git a/imp/encoding/binary.bigEndian^1e7dc.html b/imp/encoding/binary.bigEndian^1e7dc.html
index 06c0b4161cf..224c5419df1 100644
--- a/imp/encoding/binary.bigEndian^1e7dc.html
+++ b/imp/encoding/binary.bigEndian^1e7dc.html
@@ -36,12 +36,12 @@
 		 bigEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-40">Uint16</a></b></div>
 <div class="anchor" id="name-Uint32">	<a href="../../use/encoding/binary..bigEndian^1e7dc.Uint32.html">Uint32</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint32">uint32</a>
 		 bigEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-41">Uint32</a></b>
-		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../use/encoding/binary..bigEndian^1e7dc.Uint64.html">Uint64</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint64">uint64</a>
 		 bigEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-42">Uint64</a></b>
-		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/encoding/binary.littleEndian^40d0b.html b/imp/encoding/binary.littleEndian^40d0b.html
index 7bacb72ddee..567c44308a4 100644
--- a/imp/encoding/binary.littleEndian^40d0b.html
+++ b/imp/encoding/binary.littleEndian^40d0b.html
@@ -36,12 +36,12 @@
 		 littleEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-40">Uint16</a></b></div>
 <div class="anchor" id="name-Uint32">	<a href="../../use/encoding/binary..littleEndian^40d0b.Uint32.html">Uint32</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint32">uint32</a>
 		 littleEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-41">Uint32</a></b>
-		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../use/encoding/binary..littleEndian^40d0b.Uint64.html">Uint64</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint64">uint64</a>
 		 littleEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-42">Uint64</a></b>
-		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/encoding/binary.nativeEndian^61760.html b/imp/encoding/binary.nativeEndian^61760.html
index 1d82ea80fc1..898ffc34aec 100644
--- a/imp/encoding/binary.nativeEndian^61760.html
+++ b/imp/encoding/binary.nativeEndian^61760.html
@@ -36,12 +36,12 @@
 		 nativeEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-40">Uint16</a></b></div>
 <div class="anchor" id="name-Uint32">	<a href="../../use/encoding/binary..nativeEndian^61760.Uint32.html">Uint32</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint32">uint32</a>
 		 nativeEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-41">Uint32</a></b>
-		 nativeEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 nativeEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 nativeEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 nativeEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../use/encoding/binary..nativeEndian^61760.Uint64.html">Uint64</a>(b []<a href="../../pkg/builtin.html#name-byte">byte</a>) <a href="../../pkg/builtin.html#name-uint64">uint64</a>
 		 nativeEndian.M : <a href="../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../src/encoding/binary/binary.go.html#line-42">Uint64</a></b>
-		 nativeEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 nativeEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 nativeEndian.M : golang.org/x/sys/cpu.<a href="../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 nativeEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/fmt.Stringer.html b/imp/fmt.Stringer.html
index 73fc98b4d0f..e2616387575 100644
--- a/imp/fmt.Stringer.html
+++ b/imp/fmt.Stringer.html
@@ -2960,7 +2960,7 @@
 		*crypto/ecdh.<a href="../pkg/crypto/ecdh.html#name-x25519Curve">x25519Curve</a>.<b><a href="../src/crypto/ecdh/x25519.go.html#line-33">String</a></b>
 		crypto/tls.<a href="../pkg/crypto/tls.html#name-alert">alert</a>.<b><a href="../src/crypto/tls/alert.go.html#line-101">String</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-parsedURI">parsedURI</a>.<b><a href="../src/crypto/x509/constraints.go.html#line-573">String</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-256">String</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-258">String</a></b>
 		*embed.<a href="../pkg/embed.html#name-file">file</a>.<b><a href="../src/embed/embed.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-bigEndian">bigEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-148">String</a></b>
diff --git a/imp/github.com/go-faster/errors.Wrapper.html b/imp/github.com/go-faster/errors.Wrapper.html
index 9d62138e192..6fb927fed2e 100644
--- a/imp/github.com/go-faster/errors.Wrapper.html
+++ b/imp/github.com/go-faster/errors.Wrapper.html
@@ -17,7 +17,7 @@
 		*github.com/gotd/td/exchange.<a href="../../../pkg/github.com/gotd/td/exchange.html#name-ServerExchangeError">ServerExchangeError</a>.<b><a href="../../../src/github.com/gotd/td/exchange/server_flow.go.html#line-30">Unwrap</a></b>
 		*github.com/refraction-networking/utls.<a href="../../../pkg/github.com/refraction-networking/utls.html#name-CertificateVerificationError">CertificateVerificationError</a>.<b><a href="../../../src/github.com/refraction-networking/utls/common.go.html#line-1764">Unwrap</a></b>
 		*crypto/tls.<a href="../../../pkg/crypto/tls.html#name-CertificateVerificationError">CertificateVerificationError</a>.<b><a href="../../../src/crypto/tls/common.go.html#line-1820">Unwrap</a></b>
-		crypto/x509.<a href="../../../pkg/crypto/x509.html#name-SystemRootsError">SystemRootsError</a>.<b><a href="../../../src/crypto/x509/verify.go.html#line-185">Unwrap</a></b>
+		crypto/x509.<a href="../../../pkg/crypto/x509.html#name-SystemRootsError">SystemRootsError</a>.<b><a href="../../../src/crypto/x509/verify.go.html#line-187">Unwrap</a></b>
 		*encoding/json.<a href="../../../pkg/encoding/json.html#name-MarshalerError">MarshalerError</a>.<b><a href="../../../src/encoding/json/encode.go.html#line-294">Unwrap</a></b>
 		*io/fs.<a href="../../../pkg/io/fs.html#name-PathError">PathError</a>.<b><a href="../../../src/io/fs/fs.go.html#line-269">Unwrap</a></b>
 		*net.<a href="../../../pkg/net.html#name-DNSConfigError">DNSConfigError</a>.<b><a href="../../../src/net/net.go.html#line-642">Unwrap</a></b>
diff --git a/imp/golang.org/x/sys/cpu.bigEndian^1e7dc.html b/imp/golang.org/x/sys/cpu.bigEndian^1e7dc.html
index 7268ea3f293..27077a1866e 100644
--- a/imp/golang.org/x/sys/cpu.bigEndian^1e7dc.html
+++ b/imp/golang.org/x/sys/cpu.bigEndian^1e7dc.html
@@ -13,11 +13,11 @@
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
 <div class="anchor" id="name-Uint32">	<a href="../../../../use/golang.org/x/sys/cpu..bigEndian^1e7dc.Uint32.html">Uint32</a>(b []<a href="../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../pkg/builtin.html#name-uint32">uint32</a>
-		 bigEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 bigEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../use/golang.org/x/sys/cpu..bigEndian^1e7dc.Uint64.html">Uint64</a>(b []<a href="../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../pkg/builtin.html#name-uint64">uint64</a>
-		 bigEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 bigEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 bigEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html b/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
index 31c784190dc..72221711316 100644
--- a/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
+++ b/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
@@ -20,7 +20,7 @@
 		encoding/binary.<a href="../../../../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../src/encoding/binary/binary.go.html#line-90">Uint32</a></b>
 		encoding/binary.<a href="../../../../pkg/encoding/binary.html#name-nativeEndian">nativeEndian</a>.<i><a href="../../../../src/encoding/binary/native_endian_little.go.html#line-10">littleEndian</a></i>.<b><a href="../../../../src/encoding/binary/binary.go.html#line-90">Uint32</a></b>
 		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-bigEndian">bigEndian</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-31">Uint32</a></b>
-		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
 		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-20">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html">Uint64</a>([]<a href="../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../pkg/builtin.html#name-uint64">uint64</a>
 		encoding/binary.<a href="../../../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../../../src/encoding/binary/binary.go.html#line-42">Uint64</a></b>
@@ -30,7 +30,7 @@
 		encoding/binary.<a href="../../../../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../src/encoding/binary/binary.go.html#line-115">Uint64</a></b>
 		encoding/binary.<a href="../../../../pkg/encoding/binary.html#name-nativeEndian">nativeEndian</a>.<i><a href="../../../../src/encoding/binary/native_endian_little.go.html#line-10">littleEndian</a></i>.<b><a href="../../../../src/encoding/binary/binary.go.html#line-115">Uint64</a></b>
 		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-bigEndian">bigEndian</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-36">Uint64</a></b>
-		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
 		vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-25">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/imp/golang.org/x/sys/cpu.littleEndian^40d0b.html b/imp/golang.org/x/sys/cpu.littleEndian^40d0b.html
index 49f3b4820e4..8dacafd5f90 100644
--- a/imp/golang.org/x/sys/cpu.littleEndian^40d0b.html
+++ b/imp/golang.org/x/sys/cpu.littleEndian^40d0b.html
@@ -13,11 +13,11 @@
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
 <div class="anchor" id="name-Uint32">	<a href="../../../../use/golang.org/x/sys/cpu..littleEndian^40d0b.Uint32.html">Uint32</a>(b []<a href="../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../pkg/builtin.html#name-uint32">uint32</a>
-		 littleEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 littleEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../use/golang.org/x/sys/cpu..littleEndian^40d0b.Uint64.html">Uint64</a>(b []<a href="../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../pkg/builtin.html#name-uint64">uint64</a>
-		 littleEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 littleEndian.M : <a href="../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 littleEndian.M : vendor/golang.org/x/sys/cpu.<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/runtime.stringer^0a960.html b/imp/runtime.stringer^0a960.html
index 6c6252f1b44..0b1a2c644f9 100644
--- a/imp/runtime.stringer^0a960.html
+++ b/imp/runtime.stringer^0a960.html
@@ -2964,7 +2964,7 @@
 		*crypto/ecdh.<a href="../pkg/crypto/ecdh.html#name-x25519Curve">x25519Curve</a>.<b><a href="../src/crypto/ecdh/x25519.go.html#line-33">String</a></b>
 		crypto/tls.<a href="../pkg/crypto/tls.html#name-alert">alert</a>.<b><a href="../src/crypto/tls/alert.go.html#line-101">String</a></b>
 		crypto/x509.<a href="../pkg/crypto/x509.html#name-parsedURI">parsedURI</a>.<b><a href="../src/crypto/x509/constraints.go.html#line-573">String</a></b>
-		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-256">String</a></b>
+		crypto/x509.<a href="../pkg/crypto/x509.html#name-rfc2821Mailbox">rfc2821Mailbox</a>.<b><a href="../src/crypto/x509/verify.go.html#line-258">String</a></b>
 		*embed.<a href="../pkg/embed.html#name-file">file</a>.<b><a href="../src/embed/embed.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-bigEndian">bigEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-234">String</a></b>
 		encoding/binary.<a href="../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../src/encoding/binary/binary.go.html#line-148">String</a></b>
diff --git a/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html b/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
index f3cb92be3f7..93c9fdbf0cc 100644
--- a/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
+++ b/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
@@ -13,11 +13,11 @@
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
 <div class="anchor" id="name-Uint32">	<a href="../../../../../use/vendor/golang.org/x/sys/cpu..bigEndian^1e7dc.Uint32.html">Uint32</a>(b []<a href="../../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../../pkg/builtin.html#name-uint32">uint32</a>
-		 bigEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 bigEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../../use/vendor/golang.org/x/sys/cpu..bigEndian^1e7dc.Uint64.html">Uint64</a>(b []<a href="../../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../../pkg/builtin.html#name-uint64">uint64</a>
-		 bigEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 bigEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 bigEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html b/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
index 9e31a5fcf2f..db9296b6b09 100644
--- a/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
+++ b/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
@@ -20,7 +20,7 @@
 		encoding/binary.<a href="../../../../../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../../src/encoding/binary/binary.go.html#line-90">Uint32</a></b>
 		encoding/binary.<a href="../../../../../pkg/encoding/binary.html#name-nativeEndian">nativeEndian</a>.<i><a href="../../../../../src/encoding/binary/native_endian_little.go.html#line-10">littleEndian</a></i>.<b><a href="../../../../../src/encoding/binary/binary.go.html#line-90">Uint32</a></b>
 		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-bigEndian">bigEndian</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-31">Uint32</a></b>
-		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
 		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-20">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../../use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html">Uint64</a>([]<a href="../../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../../pkg/builtin.html#name-uint64">uint64</a>
 		encoding/binary.<a href="../../../../../pkg/encoding/binary.html#name-ByteOrder">ByteOrder</a>.<b><a href="../../../../../src/encoding/binary/binary.go.html#line-42">Uint64</a></b>
@@ -30,7 +30,7 @@
 		encoding/binary.<a href="../../../../../pkg/encoding/binary.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../../src/encoding/binary/binary.go.html#line-115">Uint64</a></b>
 		encoding/binary.<a href="../../../../../pkg/encoding/binary.html#name-nativeEndian">nativeEndian</a>.<i><a href="../../../../../src/encoding/binary/native_endian_little.go.html#line-10">littleEndian</a></i>.<b><a href="../../../../../src/encoding/binary/binary.go.html#line-115">Uint64</a></b>
 		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-bigEndian">bigEndian</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-36">Uint64</a></b>
-		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
 		golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-littleEndian">littleEndian</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-25">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/imp/vendor/golang.org/x/sys/cpu.littleEndian^40d0b.html b/imp/vendor/golang.org/x/sys/cpu.littleEndian^40d0b.html
index c8a04c425d7..dbb2783d42a 100644
--- a/imp/vendor/golang.org/x/sys/cpu.littleEndian^40d0b.html
+++ b/imp/vendor/golang.org/x/sys/cpu.littleEndian^40d0b.html
@@ -13,11 +13,11 @@
 <code><span class="title">Method Implmentations<span class="title-stat"><i></i></span></span>
 
 <div class="anchor" id="name-Uint32">	<a href="../../../../../use/vendor/golang.org/x/sys/cpu..littleEndian^40d0b.Uint32.html">Uint32</a>(b []<a href="../../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../../pkg/builtin.html#name-uint32">uint32</a>
-		 littleEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
-		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
+		 littleEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b>
+		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></div>
 <div class="anchor" id="name-Uint64">	<a href="../../../../../use/vendor/golang.org/x/sys/cpu..littleEndian^40d0b.Uint64.html">Uint64</a>(b []<a href="../../../../../pkg/builtin.html#name-byte">byte</a>) <a href="../../../../../pkg/builtin.html#name-uint64">uint64</a>
-		 littleEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
-		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
+		 littleEndian.M : <a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b>
+		 littleEndian.M : golang.org/x/sys/cpu.<a href="../../../../../pkg/golang.org/x/sys/cpu.html#name-byteOrder">byteOrder</a>.<b><a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></div></code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/index.html b/index.html
index 4f459a65521..c953821122f 100644
--- a/index.html
+++ b/index.html
@@ -13,7 +13,7 @@
 
 <pre><code><span class="title">Statistics (<a href="statistics.html">detailed ones</a>)</span></code>
 	Total 306 packages analyzed and 4810 Go files
-	(1596040 lines of code) parsed. On average,
+	(1596071 lines of code) parsed. On average,
 	* each Go source file imports 7.19 packages
 	  and contains 332 lines of code.
 	* each package depends on 6.70 other packages,
@@ -22,7 +22,7 @@
 	  - 4.29 variables,
 	  - 27.30 constants,
 	  - 13.51 functions.
-</pre><pre><code><span class="title">All Packages<span id="buttons1" class="js-on title-stat"> (<span class="buttons-content">sort packages by: <label id="btn-alphabet" class="button">alphabet</label><span id="importedbys"> | <label id="btn-importedbys" class="button">imported-by count</label></span><span id="codelines"> | <label id="btn-codelines" class="button">lines of code</label></span><span id="depdepth"> | <label id="btn-depdepth" class="button">dependency distance</label></span></span>)</span></span><input type='checkbox' id="toggle-summary"><div id="packages"><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-bufio" data-module="" data-loc="1269" data-importedbys="14" data-depheight="10" data-depdepth="4"><code>     <span class="order">  1</span>. <a href="pkg/bufio.html">bufio</a><i class="importedbys"> (<a href="dep/bufio.html#imported-by">14</a>)</i><i class="codelines"> (1269)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements buffered I/O. It wraps an io.Reader or io.Writer object, creating another object (Reader or Writer) that also implements the interface but provides buffering and some help for textual I/O.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-builtin" data-module="" data-loc="319" data-importedbys="305" data-depheight="2" data-depdepth="2"><code>     <span class="order">  2</span>. <a href="pkg/builtin.html">builtin</a><i class="importedbys"> (305)</i><i class="codelines"> (319)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-bytes" data-module="" data-loc="2211" data-importedbys="55" data-depheight="9" data-depdepth="3"><code>     <span class="order">  3</span>. <a href="pkg/bytes.html">bytes</a><i class="importedbys"> (<a href="dep/bytes.html#imported-by">55</a>)</i><i class="codelines"> (2211)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions for the manipulation of byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-cmp" data-module="" data-loc="77" data-importedbys="8" data-depheight="1" data-depdepth="2"><code>     <span class="order">  4</span>. <a href="pkg/cmp.html">cmp</a><i class="importedbys"> (<a href="dep/cmp.html#imported-by">8</a>)</i><i class="codelines"> (77)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides types and functions related to comparing ordered values.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/flate" data-module="" data-loc="3205" data-importedbys="5" data-depheight="15" data-depdepth="4"><code>     <span class="order">  5</span>. <a href="pkg/compress/flate.html">compress/flate</a><i class="importedbys"> (<a href="dep/compress/flate.html#imported-by">5</a>)</i><i class="codelines"> (3205)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the DEFLATE compressed data format, described in RFC 1951.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/gzip" data-module="" data-loc="540" data-importedbys="2" data-depheight="16" data-depdepth="4"><code>     <span class="order">  6</span>. <a href="pkg/compress/gzip.html" class="path-duplicate">compress</a><a href="pkg/compress/gzip.html">/gzip</a><i class="importedbys"> (<a href="dep/compress/gzip.html#imported-by">2</a>)</i><i class="codelines"> (540)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements reading and writing of gzip format compressed files, as specified in RFC 1952.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/zlib" data-module="" data-loc="374" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order">  7</span>. <a href="pkg/compress/zlib.html" class="path-duplicate">compress</a><a href="pkg/compress/zlib.html">/zlib</a><i class="importedbys"> (<a href="dep/compress/zlib.html#imported-by">1</a>)</i><i class="codelines"> (374)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements reading and writing of zlib format compressed data, as specified in RFC 1950.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-container/list" data-module="" data-loc="235" data-importedbys="4" data-depheight="1" data-depdepth="4"><code>     <span class="order">  8</span>. <a href="pkg/container/list.html">container/list</a><i class="importedbys"> (<a href="dep/container/list.html#imported-by">4</a>)</i><i class="codelines"> (235)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a doubly linked list.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-context" data-module="" data-loc="806" data-importedbys="31" data-depheight="11" data-depdepth="2"><code>     <span class="order">  9</span>. <a href="pkg/context.html">context</a><i class="importedbys"> (<a href="dep/context.html#imported-by">31</a>)</i><i class="codelines"> (806)</i><i class="depheight"> (11)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - defines the Context type, which carries deadlines, cancellation signals, and other request-scoped values across API boundaries and between processes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto" data-module="" data-loc="273" data-importedbys="16" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 10</span>. <a href="pkg/crypto.html">crypto</a><i class="importedbys"> (<a href="dep/crypto.html#imported-by">16</a>)</i><i class="codelines"> (273)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - collects common cryptographic constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/aes" data-module="" data-loc="48" data-importedbys="10" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 11</span>. <a href="pkg/crypto/aes.html" class="path-duplicate">crypto</a><a href="pkg/crypto/aes.html">/aes</a><i class="importedbys"> (<a href="dep/crypto/aes.html#imported-by">10</a>)</i><i class="codelines"> (48)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/cipher" data-module="" data-loc="1040" data-importedbys="17" data-depheight="17" data-depdepth="3"><code>     <span class="order"> 12</span>. <a href="pkg/crypto/cipher.html" class="path-duplicate">crypto</a><a href="pkg/crypto/cipher.html">/cipher</a><i class="importedbys"> (<a href="dep/crypto/cipher.html#imported-by">17</a>)</i><i class="codelines"> (1040)</i><i class="depheight"> (17)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements standard block cipher modes that can be wrapped around low-level block cipher implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/des" data-module="" data-loc="556" data-importedbys="3" data-depheight="18" data-depdepth="4"><code>     <span class="order"> 13</span>. <a href="pkg/crypto/des.html" class="path-duplicate">crypto</a><a href="pkg/crypto/des.html">/des</a><i class="importedbys"> (<a href="dep/crypto/des.html#imported-by">3</a>)</i><i class="codelines"> (556)</i><i class="depheight"> (18)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/dsa" data-module="" data-loc="330" data-importedbys="1" data-depheight="20" data-depdepth="4"><code>     <span class="order"> 14</span>. <a href="pkg/crypto/dsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/dsa.html">/dsa</a><i class="importedbys"> (<a href="dep/crypto/dsa.html#imported-by">1</a>)</i><i class="codelines"> (330)</i><i class="depheight"> (20)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Digital Signature Algorithm, as defined in FIPS 186-3.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ecdh" data-module="" data-loc="551" data-importedbys="6" data-depheight="20" data-depdepth="4"><code>     <span class="order"> 15</span>. <a href="pkg/crypto/ecdh.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ecdh.html">/ecdh</a><i class="importedbys"> (<a href="dep/crypto/ecdh.html#imported-by">6</a>)</i><i class="codelines"> (551)</i><i class="depheight"> (20)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ecdsa" data-module="" data-loc="868" data-importedbys="3" data-depheight="21" data-depdepth="4"><code>     <span class="order"> 16</span>. <a href="pkg/crypto/ecdsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ecdsa.html">/ecdsa</a><i class="importedbys"> (<a href="dep/crypto/ecdsa.html#imported-by">3</a>)</i><i class="codelines"> (868)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Elliptic Curve Digital Signature Algorithm, as defined in [FIPS 186-5].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ed25519" data-module="" data-loc="257" data-importedbys="3" data-depheight="21" data-depdepth="4"><code>     <span class="order"> 17</span>. <a href="pkg/crypto/ed25519.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ed25519.html">/ed25519</a><i class="importedbys"> (<a href="dep/crypto/ed25519.html#imported-by">3</a>)</i><i class="codelines"> (257)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Ed25519 signature algorithm.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/elliptic" data-module="" data-loc="884" data-importedbys="4" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 18</span>. <a href="pkg/crypto/elliptic.html" class="path-duplicate">crypto</a><a href="pkg/crypto/elliptic.html">/elliptic</a><i class="importedbys"> (<a href="dep/crypto/elliptic.html#imported-by">4</a>)</i><i class="codelines"> (884)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the standard NIST P-224, P-256, P-384, and P-521 elliptic curves over prime fields.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/fips140" data-module="" data-loc="93" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order"> 19</span>. <a href="pkg/crypto/fips140.html" class="path-duplicate">crypto</a><a href="pkg/crypto/fips140.html">/fips140</a><i class="importedbys"> (<a href="dep/crypto/fips140.html#imported-by">6</a>)</i><i class="codelines"> (93)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides information about the FIPS 140-3 Go Cryptographic Module and FIPS 140-3 mode.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hkdf" data-module="" data-loc="84" data-importedbys="4" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 20</span>. <a href="pkg/crypto/hkdf.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/crypto/hkdf.html#imported-by">4</a>)</i><i class="codelines"> (84)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hmac" data-module="" data-loc="65" data-importedbys="5" data-depheight="19" data-depdepth="5"><code>     <span class="order"> 21</span>. <a href="pkg/crypto/hmac.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hmac.html">/hmac</a><i class="importedbys"> (<a href="dep/crypto/hmac.html#imported-by">5</a>)</i><i class="codelines"> (65)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hpke" data-module="" data-loc="1482" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order"> 22</span>. <a href="pkg/crypto/hpke.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hpke.html">/hpke</a><i class="importedbys"> (<a href="dep/crypto/hpke.html#imported-by">1</a>)</i><i class="codelines"> (1482)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements Hybrid Public Key Encryption (HPKE) as defined in [RFC 9180].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring" data-module="" data-loc="142" data-importedbys="12" data-depheight="18" data-depdepth="3"><code>     <span class="order"> 23</span>. <a href="pkg/crypto/internal/boring.html" class="path-duplicate">crypto</a><a href="pkg/crypto/internal/boring.html">/internal/boring</a><i class="importedbys"> (<a href="dep/crypto/internal/boring.html#imported-by">12</a>)</i><i class="codelines"> (142)</i><i class="depheight"> (18)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides access to BoringCrypto implementation functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring/bbig" data-module="" data-loc="33" data-importedbys="2" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 24</span>. <a href="pkg/crypto/internal/boring/bbig.html" class="path-duplicate">crypto/internal/boring</a><a href="pkg/crypto/internal/boring/bbig.html">/bbig</a><i class="importedbys"> (<a href="dep/crypto/internal/boring/bbig.html#imported-by">2</a>)</i><i class="codelines"> (33)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring/sig" data-module="" data-loc="17" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 25</span>. <a href="pkg/crypto/internal/boring/sig.html" class="path-duplicate">crypto/internal/boring</a><a href="pkg/crypto/internal/boring/sig.html">/sig</a><i class="importedbys"> (<a href="dep/crypto/internal/boring/sig.html#imported-by">1</a>)</i><i class="codelines"> (17)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - holds “code signatures” that can be called and will result in certain code sequences being linked into the final binary.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/constanttime" data-module="" data-loc="42" data-importedbys="5" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 26</span>. <a href="pkg/crypto/internal/constanttime.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/constanttime.html">/constanttime</a><i class="importedbys"> (<a href="dep/crypto/internal/constanttime.html#imported-by">5</a>)</i><i class="codelines"> (42)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/entropy/v1.0.0" data-module="" data-loc="430" data-importedbys="1" data-depheight="12" data-depdepth="5"><code>     <span class="order"> 27</span>. <a href="pkg/crypto/internal/entropy/v1.0.0.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/entropy/v1.0.0.html">/entropy/v1.0.0</a><i class="importedbys"> (<a href="dep/crypto/internal/entropy/v1.0.0.html#imported-by">1</a>)</i><i class="codelines"> (430)</i><i class="depheight"> (12)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements a CPU jitter-based SP 800-90B entropy source.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140" data-module="" data-loc="256" data-importedbys="18" data-depheight="10" data-depdepth="4"><code>     <span class="order"> 28</span>. <a href="pkg/crypto/internal/fips140.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140.html">/fips140</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140.html#imported-by">18</a>)</i><i class="codelines"> (256)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/aes" data-module="" data-loc="1157" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order"> 29</span>. <a href="pkg/crypto/internal/fips140/aes.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/aes.html">/aes</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/aes.html#imported-by">6</a>)</i><i class="codelines"> (1157)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/aes/gcm" data-module="" data-loc="998" data-importedbys="3" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 30</span>. <a href="pkg/crypto/internal/fips140/aes/gcm.html" class="path-duplicate">crypto/internal/fips140/aes</a><a href="pkg/crypto/internal/fips140/aes/gcm.html">/gcm</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/aes/gcm.html#imported-by">3</a>)</i><i class="codelines"> (998)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/alias" data-module="" data-loc="30" data-importedbys="6" data-depheight="2" data-depdepth="4"><code>     <span class="order"> 31</span>. <a href="pkg/crypto/internal/fips140/alias.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/alias.html">/alias</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/alias.html#imported-by">6</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/bigmod" data-module="" data-loc="1266" data-importedbys="3" data-depheight="14" data-depdepth="3"><code>     <span class="order"> 32</span>. <a href="pkg/crypto/internal/fips140/bigmod.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/bigmod.html">/bigmod</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/bigmod.html#imported-by">3</a>)</i><i class="codelines"> (1266)</i><i class="depheight"> (14)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/check" data-module="" data-loc="108" data-importedbys="18" data-depheight="13" data-depdepth="4"><code>     <span class="order"> 33</span>. <a href="pkg/crypto/internal/fips140/check.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/check.html">/check</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/check.html#imported-by">18</a>)</i><i class="codelines"> (108)</i><i class="depheight"> (13)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the FIPS 140 load-time code+data verification.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/drbg" data-module="" data-loc="358" data-importedbys="10" data-depheight="15" data-depdepth="4"><code>     <span class="order"> 34</span>. <a href="pkg/crypto/internal/fips140/drbg.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/drbg.html">/drbg</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/drbg.html#imported-by">10</a>)</i><i class="codelines"> (358)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides cryptographically secure random bytes usable by FIPS code.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ecdh" data-module="" data-loc="360" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 35</span>. <a href="pkg/crypto/internal/fips140/ecdh.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ecdh.html">/ecdh</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ecdh.html#imported-by">1</a>)</i><i class="codelines"> (360)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ecdsa" data-module="" data-loc="836" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 36</span>. <a href="pkg/crypto/internal/fips140/ecdsa.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ecdsa.html">/ecdsa</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ecdsa.html#imported-by">1</a>)</i><i class="codelines"> (836)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ed25519" data-module="" data-loc="404" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 37</span>. <a href="pkg/crypto/internal/fips140/ed25519.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ed25519.html">/ed25519</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ed25519.html#imported-by">1</a>)</i><i class="codelines"> (404)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/edwards25519" data-module="" data-loc="2289" data-importedbys="1" data-depheight="15" data-depdepth="6"><code>     <span class="order"> 38</span>. <a href="pkg/crypto/internal/fips140/edwards25519.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/edwards25519.html">/edwards25519</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/edwards25519.html#imported-by">1</a>)</i><i class="codelines"> (2289)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements group logic for the twisted Edwards curve</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/edwards25519/field" data-module="" data-loc="708" data-importedbys="2" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 39</span>. <a href="pkg/crypto/internal/fips140/edwards25519/field.html" class="path-duplicate">crypto/internal/fips140/edwards25519</a><a href="pkg/crypto/internal/fips140/edwards25519/field.html">/field</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/edwards25519/field.html#imported-by">2</a>)</i><i class="codelines"> (708)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements fast arithmetic modulo 2^255-19.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/hkdf" data-module="" data-loc="90" data-importedbys="2" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 40</span>. <a href="pkg/crypto/internal/fips140/hkdf.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/hkdf.html#imported-by">2</a>)</i><i class="codelines"> (90)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/hmac" data-module="" data-loc="243" data-importedbys="6" data-depheight="12" data-depdepth="5"><code>     <span class="order"> 41</span>. <a href="pkg/crypto/internal/fips140/hmac.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/hmac.html">/hmac</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/hmac.html#imported-by">6</a>)</i><i class="codelines"> (243)</i><i class="depheight"> (12)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements HMAC according to [FIPS 198-1].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/mlkem" data-module="" data-loc="1609" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order"> 42</span>. <a href="pkg/crypto/internal/fips140/mlkem.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/mlkem.html">/mlkem</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/mlkem.html#imported-by">1</a>)</i><i class="codelines"> (1609)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/nistec" data-module="" data-loc="2478" data-importedbys="4" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 43</span>. <a href="pkg/crypto/internal/fips140/nistec.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/nistec.html">/nistec</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/nistec.html#imported-by">4</a>)</i><i class="codelines"> (2478)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the elliptic curves from NIST SP 800-186.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/nistec/fiat" data-module="" data-loc="12323" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 44</span>. <a href="pkg/crypto/internal/fips140/nistec/fiat.html" class="path-duplicate">crypto/internal/fips140/nistec</a><a href="pkg/crypto/internal/fips140/nistec/fiat.html">/fiat</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/nistec/fiat.html#imported-by">1</a>)</i><i class="codelines"> (12323)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/pbkdf2" data-module="" data-loc="131" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 45</span>. <a href="pkg/crypto/internal/fips140/pbkdf2.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/pbkdf2.html#imported-by">1</a>)</i><i class="codelines"> (131)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/rsa" data-module="" data-loc="1714" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order"> 46</span>. <a href="pkg/crypto/internal/fips140/rsa.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/rsa.html">/rsa</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/rsa.html#imported-by">1</a>)</i><i class="codelines"> (1714)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha256" data-module="" data-loc="440" data-importedbys="10" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 47</span>. <a href="pkg/crypto/internal/fips140/sha256.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha256.html">/sha256</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha256.html#imported-by">10</a>)</i><i class="codelines"> (440)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-224 and SHA-256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha3" data-module="" data-loc="933" data-importedbys="6" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 48</span>. <a href="pkg/crypto/internal/fips140/sha3.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha3.html#imported-by">6</a>)</i><i class="codelines"> (933)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-3 fixed-output-length hash functions and the SHAKE variable-output-length functions defined by [FIPS 202], as well as the cSHAKE extendable-output-length functions defined by [SP 800-185].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha512" data-module="" data-loc="515" data-importedbys="7" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 49</span>. <a href="pkg/crypto/internal/fips140/sha512.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha512.html">/sha512</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha512.html#imported-by">7</a>)</i><i class="codelines"> (515)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/subtle" data-module="" data-loc="115" data-importedbys="9" data-depheight="3" data-depdepth="4"><code>     <span class="order"> 50</span>. <a href="pkg/crypto/internal/fips140/subtle.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/subtle.html">/subtle</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/subtle.html#imported-by">9</a>)</i><i class="codelines"> (115)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/tls12" data-module="" data-loc="108" data-importedbys="1" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 51</span>. <a href="pkg/crypto/internal/fips140/tls12.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/tls12.html">/tls12</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/tls12.html#imported-by">1</a>)</i><i class="codelines"> (108)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/tls13" data-module="" data-loc="215" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 52</span>. <a href="pkg/crypto/internal/fips140/tls13.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/tls13.html">/tls13</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/tls13.html#imported-by">1</a>)</i><i class="codelines"> (215)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140cache" data-module="" data-loc="52" data-importedbys="2" data-depheight="7" data-depdepth="5"><code>     <span class="order"> 53</span>. <a href="pkg/crypto/internal/fips140cache.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140cache.html">/fips140cache</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140cache.html#imported-by">2</a>)</i><i class="codelines"> (52)</i><i class="depheight"> (7)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides a weak map that associates the lifetime of values with the lifetime of keys.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/byteorder" data-module="" data-loc="55" data-importedbys="15" data-depheight="2" data-depdepth="4"><code>     <span class="order"> 54</span>. <a href="pkg/crypto/internal/fips140deps/byteorder.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140deps/byteorder.html">/fips140deps/byteorder</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/byteorder.html#imported-by">15</a>)</i><i class="codelines"> (55)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/cpu" data-module="" data-loc="49" data-importedbys="6" data-depheight="3" data-depdepth="4"><code>     <span class="order"> 55</span>. <a href="pkg/crypto/internal/fips140deps/cpu.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/cpu.html#imported-by">6</a>)</i><i class="codelines"> (49)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/godebug" data-module="" data-loc="23" data-importedbys="3" data-depheight="9" data-depdepth="5"><code>     <span class="order"> 56</span>. <a href="pkg/crypto/internal/fips140deps/godebug.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/godebug.html">/godebug</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/godebug.html#imported-by">3</a>)</i><i class="codelines"> (23)</i><i class="depheight"> (9)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/time" data-module="" data-loc="21" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order"> 57</span>. <a href="pkg/crypto/internal/fips140deps/time.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/time.html">/time</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/time.html#imported-by">1</a>)</i><i class="codelines"> (21)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140hash" data-module="" data-loc="34" data-importedbys="5" data-depheight="13" data-depdepth="3"><code>     <span class="order"> 58</span>. <a href="pkg/crypto/internal/fips140hash.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140hash.html">/fips140hash</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140hash.html#imported-by">5</a>)</i><i class="codelines"> (34)</i><i class="depheight"> (13)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140only" data-module="" data-loc="35" data-importedbys="14" data-depheight="16" data-depdepth="3"><code>     <span class="order"> 59</span>. <a href="pkg/crypto/internal/fips140only.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140only.html">/fips140only</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140only.html#imported-by">14</a>)</i><i class="codelines"> (35)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/impl" data-module="" data-loc="107" data-importedbys="6" data-depheight="10" data-depdepth="4"><code>     <span class="order"> 60</span>. <a href="pkg/crypto/internal/impl.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/impl.html">/impl</a><i class="importedbys"> (<a href="dep/crypto/internal/impl.html#imported-by">6</a>)</i><i class="codelines"> (107)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - is a registry of alternative implementations of cryptographic primitives, to allow selecting them for testing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/rand" data-module="" data-loc="89" data-importedbys="7" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 61</span>. <a href="pkg/crypto/internal/rand.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/rand.html">/rand</a><i class="importedbys"> (<a href="dep/crypto/internal/rand.html#imported-by">7</a>)</i><i class="codelines"> (89)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/randutil" data-module="" data-loc="26" data-importedbys="1" data-depheight="9" data-depdepth="4"><code>     <span class="order"> 62</span>. <a href="pkg/crypto/internal/randutil.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/randutil.html">/randutil</a><i class="importedbys"> (<a href="dep/crypto/internal/randutil.html#imported-by">1</a>)</i><i class="codelines"> (26)</i><i class="depheight"> (9)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains internal randomness utilities for various crypto packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/sysrand" data-module="" data-loc="144" data-importedbys="1" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 63</span>. <a href="pkg/crypto/internal/sysrand.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/sysrand.html">/sysrand</a><i class="importedbys"> (<a href="dep/crypto/internal/sysrand.html#imported-by">1</a>)</i><i class="codelines"> (144)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - rand provides cryptographically secure random bytes from the operating system.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/md5" data-module="" data-loc="347" data-importedbys="4" data-depheight="17" data-depdepth="4"><code>     <span class="order"> 64</span>. <a href="pkg/crypto/md5.html" class="path-duplicate">crypto</a><a href="pkg/crypto/md5.html">/md5</a><i class="importedbys"> (<a href="dep/crypto/md5.html#imported-by">4</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the MD5 hash algorithm as defined in RFC 1321.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/mlkem" data-module="" data-loc="221" data-importedbys="3" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 65</span>. <a href="pkg/crypto/mlkem.html" class="path-duplicate">crypto</a><a href="pkg/crypto/mlkem.html">/mlkem</a><i class="importedbys"> (<a href="dep/crypto/mlkem.html#imported-by">3</a>)</i><i class="codelines"> (221)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/pbkdf2" data-module="" data-loc="54" data-importedbys="1" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 66</span>. <a href="pkg/crypto/pbkdf2.html" class="path-duplicate">crypto</a><a href="pkg/crypto/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/crypto/pbkdf2.html#imported-by">1</a>)</i><i class="codelines"> (54)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rand" data-module="" data-loc="198" data-importedbys="11" data-depheight="20" data-depdepth="3"><code>     <span class="order"> 67</span>. <a href="pkg/crypto/rand.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rand.html">/rand</a><i class="importedbys"> (<a href="dep/crypto/rand.html#imported-by">11</a>)</i><i class="codelines"> (198)</i><i class="depheight"> (20)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a cryptographically secure random number generator.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rc4" data-module="" data-loc="83" data-importedbys="2" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 68</span>. <a href="pkg/crypto/rc4.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rc4.html">/rc4</a><i class="importedbys"> (<a href="dep/crypto/rc4.html#imported-by">2</a>)</i><i class="codelines"> (83)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rsa" data-module="" data-loc="1441" data-importedbys="7" data-depheight="21" data-depdepth="2"><code>     <span class="order"> 69</span>. <a href="pkg/crypto/rsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rsa.html">/rsa</a><i class="importedbys"> (<a href="dep/crypto/rsa.html#imported-by">7</a>)</i><i class="codelines"> (1441)</i><i class="depheight"> (21)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements RSA encryption as specified in PKCS #1 and RFC 8017.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha1" data-module="" data-loc="413" data-importedbys="6" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 70</span>. <a href="pkg/crypto/sha1.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha1.html">/sha1</a><i class="importedbys"> (<a href="dep/crypto/sha1.html#imported-by">6</a>)</i><i class="codelines"> (413)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the SHA-1 hash algorithm as defined in RFC 3174.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha256" data-module="" data-loc="74" data-importedbys="8" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 71</span>. <a href="pkg/crypto/sha256.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha256.html">/sha256</a><i class="importedbys"> (<a href="dep/crypto/sha256.html#imported-by">8</a>)</i><i class="codelines"> (74)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha3" data-module="" data-loc="274" data-importedbys="3" data-depheight="12" data-depdepth="4"><code>     <span class="order"> 72</span>. <a href="pkg/crypto/sha3.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/crypto/sha3.html#imported-by">3</a>)</i><i class="codelines"> (274)</i><i class="depheight"> (12)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha512" data-module="" data-loc="123" data-importedbys="7" data-depheight="19" data-depdepth="4"><code>     <span class="order"> 73</span>. <a href="pkg/crypto/sha512.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha512.html">/sha512</a><i class="importedbys"> (<a href="dep/crypto/sha512.html#imported-by">7</a>)</i><i class="codelines"> (123)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/subtle" data-module="" data-loc="134" data-importedbys="11" data-depheight="4" data-depdepth="3"><code>     <span class="order"> 74</span>. <a href="pkg/crypto/subtle.html" class="path-duplicate">crypto</a><a href="pkg/crypto/subtle.html">/subtle</a><i class="importedbys"> (<a href="dep/crypto/subtle.html#imported-by">11</a>)</i><i class="codelines"> (134)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions that are often useful in cryptographic code but require careful thought to use correctly.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/tls" data-module="" data-loc="14445" data-importedbys="2" data-depheight="23" data-depdepth="4"><code>     <span class="order"> 75</span>. <a href="pkg/crypto/tls.html" class="path-duplicate">crypto</a><a href="pkg/crypto/tls.html">/tls</a><i class="importedbys"> (<a href="dep/crypto/tls.html#imported-by">2</a>)</i><i class="codelines"> (14445)</i><i class="depheight"> (23)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/tls/internal/fips140tls" data-module="" data-loc="37" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 76</span>. <a href="pkg/crypto/tls/internal/fips140tls.html" class="path-duplicate">crypto/tls</a><a href="pkg/crypto/tls/internal/fips140tls.html">/internal/fips140tls</a><i class="importedbys"> (<a href="dep/crypto/tls/internal/fips140tls.html#imported-by">1</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - controls whether crypto/tls requires FIPS-approved settings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/x509" data-module="" data-loc="7768" data-importedbys="3" data-depheight="22" data-depdepth="3"><code>     <span class="order"> 77</span>. <a href="pkg/crypto/x509.html" class="path-duplicate">crypto</a><a href="pkg/crypto/x509.html">/x509</a><i class="importedbys"> (<a href="dep/crypto/x509.html#imported-by">3</a>)</i><i class="codelines"> (7768)</i><i class="depheight"> (22)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of the X.509 standard.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/x509/pkix" data-module="" data-loc="320" data-importedbys="1" data-depheight="17" data-depdepth="4"><code>     <span class="order"> 78</span>. <a href="pkg/crypto/x509/pkix.html" class="path-duplicate">crypto/x509</a><a href="pkg/crypto/x509/pkix.html">/pkix</a><i class="importedbys"> (<a href="dep/crypto/x509/pkix.html#imported-by">1</a>)</i><i class="codelines"> (320)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-embed" data-module="" data-loc="436" data-importedbys="1" data-depheight="12" data-depdepth="3"><code>     <span class="order"> 79</span>. <a href="pkg/embed.html">embed</a><i class="importedbys"> (<a href="dep/embed.html#imported-by">1</a>)</i><i class="codelines"> (436)</i><i class="depheight"> (12)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides access to files embedded in the running Go program.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding" data-module="" data-loc="78" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 80</span>. <a href="pkg/encoding.html">encoding</a><i class="importedbys"> (<a href="dep/encoding.html#imported-by">1</a>)</i><i class="codelines"> (78)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines interfaces shared by other packages that convert data to and from byte-level and textual representations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/asn1" data-module="" data-loc="2116" data-importedbys="4" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 81</span>. <a href="pkg/encoding/asn1.html" class="path-duplicate">encoding</a><a href="pkg/encoding/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/encoding/asn1.html#imported-by">4</a>)</i><i class="codelines"> (2116)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements parsing of DER-encoded ASN.1 data structures, as defined in ITU-T Rec X.690.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/base64" data-module="" data-loc="665" data-importedbys="14" data-depheight="9" data-depdepth="3"><code>     <span class="order"> 82</span>. <a href="pkg/encoding/base64.html" class="path-duplicate">encoding</a><a href="pkg/encoding/base64.html">/base64</a><i class="importedbys"> (<a href="dep/encoding/base64.html#imported-by">14</a>)</i><i class="codelines"> (665)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements base64 encoding as specified by RFC 4648.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/binary" data-module="" data-loc="1214" data-importedbys="33" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 83</span>. <a href="pkg/encoding/binary.html" class="path-duplicate">encoding</a><a href="pkg/encoding/binary.html">/binary</a><i class="importedbys"> (<a href="dep/encoding/binary.html#imported-by">33</a>)</i><i class="codelines"> (1214)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements simple translation between numbers and byte sequences and encoding and decoding of varints.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/hex" data-module="" data-loc="353" data-importedbys="9" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 84</span>. <a href="pkg/encoding/hex.html" class="path-duplicate">encoding</a><a href="pkg/encoding/hex.html">/hex</a><i class="importedbys"> (<a href="dep/encoding/hex.html#imported-by">9</a>)</i><i class="codelines"> (353)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements hexadecimal encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/json" data-module="" data-loc="4266" data-importedbys="8" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 85</span>. <a href="pkg/encoding/json.html" class="path-duplicate">encoding</a><a href="pkg/encoding/json.html">/json</a><i class="importedbys"> (<a href="dep/encoding/json.html#imported-by">8</a>)</i><i class="codelines"> (4266)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements encoding and decoding of JSON as defined in RFC 7159.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/pem" data-module="" data-loc="331" data-importedbys="5" data-depheight="10" data-depdepth="2"><code>     <span class="order"> 86</span>. <a href="pkg/encoding/pem.html" class="path-duplicate">encoding</a><a href="pkg/encoding/pem.html">/pem</a><i class="importedbys"> (<a href="dep/encoding/pem.html#imported-by">5</a>)</i><i class="codelines"> (331)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements the PEM data encoding, which originated in Privacy Enhanced Mail.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-errors" data-module="" data-loc="362" data-importedbys="123" data-depheight="7" data-depdepth="3"><code>     <span class="order"> 87</span>. <a href="pkg/errors.html">errors</a><i class="importedbys"> (<a href="dep/errors.html#imported-by">123</a>)</i><i class="codelines"> (362)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions to manipulate errors.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-fmt" data-module="" data-loc="3547" data-importedbys="70" data-depheight="14" data-depdepth="2"><code>     <span class="order"> 88</span>. <a href="pkg/fmt.html">fmt</a><i class="importedbys"> (<a href="dep/fmt.html#imported-by">70</a>)</i><i class="codelines"> (3547)</i><i class="depheight"> (14)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements formatted I/O with functions analogous to C's printf and scanf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli" data-module="github.com/andybalholm/brotli" data-loc="257281" data-importedbys="1" data-depheight="27" data-depdepth="5"><code>     <span class="order"> 89</span>. <a href="pkg/github.com/andybalholm/brotli.html">github.com/andybalholm/brotli</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli.html#imported-by">1</a>)</i><i class="codelines"> (257281)</i><i class="depheight"> (27)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli/flate" data-module="github.com/andybalholm/brotli" data-loc="1074" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order"> 90</span>. <a href="pkg/github.com/andybalholm/brotli/flate.html" class="path-duplicate">github.com/andybalholm/brotli</a><a href="pkg/github.com/andybalholm/brotli/flate.html">/flate</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli/flate.html#imported-by">1</a>)</i><i class="codelines"> (1074)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli/matchfinder" data-module="github.com/andybalholm/brotli" data-loc="2861" data-importedbys="2" data-depheight="15" data-depdepth="6"><code>     <span class="order"> 91</span>. <a href="pkg/github.com/andybalholm/brotli/matchfinder.html" class="path-duplicate">github.com/andybalholm/brotli</a><a href="pkg/github.com/andybalholm/brotli/matchfinder.html">/matchfinder</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli/matchfinder.html#imported-by">2</a>)</i><i class="codelines"> (2861)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - The matchfinder package defines reusable components for data compression.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/cenkalti/backoff/v4" data-module="github.com/cenkalti/backoff/v4" data-loc="660" data-importedbys="3" data-depheight="12" data-depdepth="1"><code>     <span class="order"> 92</span>. <a href="pkg/github.com/cenkalti/backoff/v4.html" class="path-duplicate">github.com</a><a href="pkg/github.com/cenkalti/backoff/v4.html">/cenkalti/backoff/v4</a><i class="importedbys"> (<a href="dep/github.com/cenkalti/backoff/v4.html#imported-by">3</a>)</i><i class="codelines"> (660)</i><i class="depheight"> (12)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements backoff algorithms for retrying operations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/cespare/xxhash/v2" data-module="github.com/cespare/xxhash/v2" data-loc="316" data-importedbys="1" data-depheight="11" data-depdepth="3"><code>     <span class="order"> 93</span>. <a href="pkg/github.com/cespare/xxhash/v2.html" class="path-duplicate">github.com</a><a href="pkg/github.com/cespare/xxhash/v2.html">/cespare/xxhash/v2</a><i class="importedbys"> (<a href="dep/github.com/cespare/xxhash/v2.html#imported-by">1</a>)</i><i class="codelines"> (316)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the 64-bit variant of xxHash (XXH64) as described at http://cyan4973.github.io/xxHash/.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket" data-module="github.com/coder/websocket" data-loc="3325" data-importedbys="3" data-depheight="27" data-depdepth="2"><code>     <span class="order"> 94</span>. <a href="pkg/github.com/coder/websocket.html" class="path-duplicate">github.com</a><a href="pkg/github.com/coder/websocket.html">/coder/websocket</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket.html#imported-by">3</a>)</i><i class="codelines"> (3325)</i><i class="depheight"> (27)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements the RFC 6455 WebSocket protocol.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/bpool" data-module="github.com/coder/websocket" data-loc="25" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 95</span>. <a href="pkg/github.com/coder/websocket/internal/bpool.html" class="path-duplicate">github.com/coder/websocket</a><a href="pkg/github.com/coder/websocket/internal/bpool.html">/internal/bpool</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/bpool.html#imported-by">1</a>)</i><i class="codelines"> (25)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/errd" data-module="github.com/coder/websocket" data-loc="14" data-importedbys="1" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 96</span>. <a href="pkg/github.com/coder/websocket/internal/errd.html" class="path-duplicate">github.com/coder/websocket/internal</a><a href="pkg/github.com/coder/websocket/internal/errd.html">/errd</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/errd.html#imported-by">1</a>)</i><i class="codelines"> (14)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/util" data-module="github.com/coder/websocket" data-loc="15" data-importedbys="1" data-depheight="1" data-depdepth="3"><code>     <span class="order"> 97</span>. <a href="pkg/github.com/coder/websocket/internal/util.html" class="path-duplicate">github.com/coder/websocket/internal</a><a href="pkg/github.com/coder/websocket/internal/util.html">/util</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/util.html#imported-by">1</a>)</i><i class="codelines"> (15)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/errors" data-module="github.com/go-faster/errors" data-loc="556" data-importedbys="27" data-depheight="15" data-depdepth="1"><code>     <span class="order"> 98</span>. <a href="pkg/github.com/go-faster/errors.html" class="path-duplicate">github.com</a><a href="pkg/github.com/go-faster/errors.html">/go-faster/errors</a><i class="importedbys"> (<a href="dep/github.com/go-faster/errors.html#imported-by">27</a>)</i><i class="codelines"> (556)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements functions to manipulate errors.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/jx" data-module="github.com/go-faster/jx" data-loc="4828" data-importedbys="4" data-depheight="18" data-depdepth="1"><code>     <span class="order"> 99</span>. <a href="pkg/github.com/go-faster/jx.html" class="path-duplicate">github.com/go-faster</a><a href="pkg/github.com/go-faster/jx.html">/jx</a><i class="importedbys"> (<a href="dep/github.com/go-faster/jx.html#imported-by">4</a>)</i><i class="codelines"> (4828)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements RFC 7159 json encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/jx/internal/byteseq" data-module="github.com/go-faster/jx" data-loc="16" data-importedbys="1" data-depheight="2" data-depdepth="2"><code>     <span class="order">100</span>. <a href="pkg/github.com/go-faster/jx/internal/byteseq.html" class="path-duplicate">github.com/go-faster/jx</a><a href="pkg/github.com/go-faster/jx/internal/byteseq.html">/internal/byteseq</a><i class="importedbys"> (<a href="dep/github.com/go-faster/jx/internal/byteseq.html#imported-by">1</a>)</i><i class="codelines"> (16)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a Byteseq type that can be used to represent a sequence of bytes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/xor" data-module="github.com/go-faster/xor" data-loc="30" data-importedbys="3" data-depheight="1" data-depdepth="2"><code>     <span class="order">101</span>. <a href="pkg/github.com/go-faster/xor.html" class="path-duplicate">github.com/go-faster</a><a href="pkg/github.com/go-faster/xor.html">/xor</a><i class="importedbys"> (<a href="dep/github.com/go-faster/xor.html#imported-by">3</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/ige" data-module="github.com/gotd/ige" data-loc="212" data-importedbys="2" data-depheight="20" data-depdepth="2"><code>     <span class="order">102</span>. <a href="pkg/github.com/gotd/ige.html" class="path-duplicate">github.com</a><a href="pkg/github.com/gotd/ige.html">/gotd/ige</a><i class="importedbys"> (<a href="dep/github.com/gotd/ige.html#imported-by">2</a>)</i><i class="codelines"> (212)</i><i class="depheight"> (20)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/log" data-module="github.com/gotd/log" data-loc="460" data-importedbys="8" data-depheight="15" data-depdepth="1"><code>     <span class="order">103</span>. <a href="pkg/github.com/gotd/log.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/log.html">/log</a><i class="importedbys"> (<a href="dep/github.com/gotd/log.html#imported-by">8</a>)</i><i class="codelines"> (460)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - defines a minimal, dependency-free logging port for gotd libraries.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/neo" data-module="github.com/gotd/neo" data-loc="538" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">104</span>. <a href="pkg/github.com/gotd/neo.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/neo.html">/neo</a><i class="importedbys"> (<a href="dep/github.com/gotd/neo.html#imported-by">1</a>)</i><i class="codelines"> (538)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements side effects simulation for testing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/ascii" data-module="github.com/gotd/td" data-loc="19" data-importedbys="1" data-depheight="1" data-depdepth="2"><code>     <span class="order">105</span>. <a href="pkg/github.com/gotd/td/ascii.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/td/ascii.html">/td/ascii</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/ascii.html#imported-by">1</a>)</i><i class="codelines"> (19)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides data and functions to test some properties of ASCII code points.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/bin" data-module="github.com/gotd/td" data-loc="742" data-importedbys="17" data-depheight="16" data-depdepth="1"><code>     <span class="order">106</span>. <a href="pkg/github.com/gotd/td/bin.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/bin.html">/bin</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/bin.html#imported-by">17</a>)</i><i class="codelines"> (742)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements binary serialization and deserialization for TL, providing Buffer that can decode and encode basic Type Language types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/clock" data-module="github.com/gotd/td" data-loc="81" data-importedbys="9" data-depheight="16" data-depdepth="1"><code>     <span class="order">107</span>. <a href="pkg/github.com/gotd/td/clock.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/clock.html">/clock</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/clock.html#imported-by">9</a>)</i><i class="codelines"> (81)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - abstracts time source.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/constant" data-module="github.com/gotd/td" data-loc="146" data-importedbys="1" data-depheight="1" data-depdepth="1"><code>     <span class="order">108</span>. <a href="pkg/github.com/gotd/td/constant.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/constant.html">/constant</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/constant.html#imported-by">1</a>)</i><i class="codelines"> (146)</i><i class="depheight"> (1)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - wraps Telegram-defined constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/crypto" data-module="github.com/gotd/td" data-loc="1943" data-importedbys="12" data-depheight="23" data-depdepth="1"><code>     <span class="order">109</span>. <a href="pkg/github.com/gotd/td/crypto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/crypto.html">/crypto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/crypto.html#imported-by">12</a>)</i><i class="codelines"> (1943)</i><i class="depheight"> (23)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements cryptographical primitives for MTproto.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/crypto/srp" data-module="github.com/gotd/td" data-loc="258" data-importedbys="1" data-depheight="24" data-depdepth="2"><code>     <span class="order">110</span>. <a href="pkg/github.com/gotd/td/crypto/srp.html" class="path-duplicate">github.com/gotd/td/crypto</a><a href="pkg/github.com/gotd/td/crypto/srp.html">/srp</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/crypto/srp.html#imported-by">1</a>)</i><i class="codelines"> (258)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains implementation of Secure Remote Password protocol.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/exchange" data-module="github.com/gotd/td" data-loc="1053" data-importedbys="3" data-depheight="30" data-depdepth="1"><code>     <span class="order">111</span>. <a href="pkg/github.com/gotd/td/exchange.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/exchange.html">/exchange</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/exchange.html#imported-by">3</a>)</i><i class="codelines"> (1053)</i><i class="depheight"> (30)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram key exchange algorithm flows.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mt" data-module="github.com/gotd/td" data-loc="9454" data-importedbys="4" data-depheight="20" data-depdepth="1"><code>     <span class="order">112</span>. <a href="pkg/github.com/gotd/td/mt.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mt.html">/mt</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mt.html#imported-by">4</a>)</i><i class="codelines"> (9454)</i><i class="depheight"> (20)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains generated code based on mtproto schema.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproto" data-module="github.com/gotd/td" data-loc="2196" data-importedbys="3" data-depheight="31" data-depdepth="1"><code>     <span class="order">113</span>. <a href="pkg/github.com/gotd/td/mtproto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mtproto.html">/mtproto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproto.html#imported-by">3</a>)</i><i class="codelines"> (2196)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements MTProto connection.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproto/salts" data-module="github.com/gotd/td" data-loc="90" data-importedbys="1" data-depheight="21" data-depdepth="2"><code>     <span class="order">114</span>. <a href="pkg/github.com/gotd/td/mtproto/salts.html" class="path-duplicate">github.com/gotd/td/mtproto</a><a href="pkg/github.com/gotd/td/mtproto/salts.html">/salts</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproto/salts.html#imported-by">1</a>)</i><i class="codelines"> (90)</i><i class="depheight"> (21)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProto server salt storage.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy" data-module="github.com/gotd/td" data-loc="86" data-importedbys="4" data-depheight="25" data-depdepth="2"><code>     <span class="order">115</span>. <a href="pkg/github.com/gotd/td/mtproxy.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mtproxy.html">/mtproxy</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy.html#imported-by">4</a>)</i><i class="codelines"> (86)</i><i class="depheight"> (25)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProxy transport implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/faketls" data-module="github.com/gotd/td" data-loc="414" data-importedbys="1" data-depheight="29" data-depdepth="3"><code>     <span class="order">116</span>. <a href="pkg/github.com/gotd/td/mtproxy/faketls.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/faketls.html">/faketls</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/faketls.html#imported-by">1</a>)</i><i class="codelines"> (414)</i><i class="depheight"> (29)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains faketls implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/obfuscated2" data-module="github.com/gotd/td" data-loc="241" data-importedbys="2" data-depheight="26" data-depdepth="2"><code>     <span class="order">117</span>. <a href="pkg/github.com/gotd/td/mtproxy/obfuscated2.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/obfuscated2.html">/obfuscated2</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/obfuscated2.html#imported-by">2</a>)</i><i class="codelines"> (241)</i><i class="depheight"> (26)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains obfuscated2 implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/obfuscator" data-module="github.com/gotd/td" data-loc="92" data-importedbys="1" data-depheight="30" data-depdepth="2"><code>     <span class="order">118</span>. <a href="pkg/github.com/gotd/td/mtproxy/obfuscator.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/obfuscator.html">/obfuscator</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/obfuscator.html#imported-by">1</a>)</i><i class="codelines"> (92)</i><i class="depheight"> (30)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains some MTProxy obfuscation utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/oteltg" data-module="github.com/gotd/td" data-loc="6" data-importedbys="1" data-depheight="1" data-depdepth="1"><code>     <span class="order">119</span>. <a href="pkg/github.com/gotd/td/oteltg.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/oteltg.html">/oteltg</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/oteltg.html#imported-by">1</a>)</i><i class="codelines"> (6)</i><i class="depheight"> (1)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provide OpenTelemetry instrumentation for gotd.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/pool" data-module="github.com/gotd/td" data-loc="491" data-importedbys="2" data-depheight="32" data-depdepth="1"><code>     <span class="order">120</span>. <a href="pkg/github.com/gotd/td/pool.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/pool.html">/pool</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/pool.html#imported-by">2</a>)</i><i class="codelines"> (491)</i><i class="depheight"> (32)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram connections pool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/proto" data-module="github.com/gotd/td" data-loc="621" data-importedbys="3" data-depheight="18" data-depdepth="1"><code>     <span class="order">121</span>. <a href="pkg/github.com/gotd/td/proto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/proto.html">/proto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/proto.html#imported-by">3</a>)</i><i class="codelines"> (621)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements MTProto 2.0 primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/proto/codec" data-module="github.com/gotd/td" data-loc="662" data-importedbys="5" data-depheight="24" data-depdepth="2"><code>     <span class="order">122</span>. <a href="pkg/github.com/gotd/td/proto/codec.html" class="path-duplicate">github.com/gotd/td/proto</a><a href="pkg/github.com/gotd/td/proto/codec.html">/codec</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/proto/codec.html#imported-by">5</a>)</i><i class="codelines"> (662)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProto transport encoding implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/rpc" data-module="github.com/gotd/td" data-loc="453" data-importedbys="3" data-depheight="17" data-depdepth="1"><code>     <span class="order">123</span>. <a href="pkg/github.com/gotd/td/rpc.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/rpc.html">/rpc</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/rpc.html#imported-by">3</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements rpc engine.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/session" data-module="github.com/gotd/td" data-loc="480" data-importedbys="1" data-depheight="32" data-depdepth="1"><code>     <span class="order">124</span>. <a href="pkg/github.com/gotd/td/session.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/session.html">/session</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/session.html#imported-by">1</a>)</i><i class="codelines"> (480)</i><i class="depheight"> (32)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements session storage.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/session/tdesktop" data-module="github.com/gotd/td" data-loc="1213" data-importedbys="1" data-depheight="24" data-depdepth="2"><code>     <span class="order">125</span>. <a href="pkg/github.com/gotd/td/session/tdesktop.html" class="path-duplicate">github.com/gotd/td/session</a><a href="pkg/github.com/gotd/td/session/tdesktop.html">/tdesktop</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/session/tdesktop.html#imported-by">1</a>)</i><i class="codelines"> (1213)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains Telegram Desktop session decoder.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/syncio" data-module="github.com/gotd/td" data-loc="125" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">126</span>. <a href="pkg/github.com/gotd/td/syncio.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/syncio.html">/syncio</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/syncio.html#imported-by">1</a>)</i><i class="codelines"> (125)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains synchronized wrappers for interfaces from io package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdjson" data-module="github.com/gotd/td" data-loc="347" data-importedbys="3" data-depheight="19" data-depdepth="1"><code>     <span class="order">127</span>. <a href="pkg/github.com/gotd/td/tdjson.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdjson.html">/tdjson</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdjson.html#imported-by">3</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (19)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains some helpers to use jx with TL objects.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdp" data-module="github.com/gotd/td" data-loc="148" data-importedbys="2" data-depheight="15" data-depdepth="2"><code>     <span class="order">128</span>. <a href="pkg/github.com/gotd/td/tdp.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdp.html">/tdp</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdp.html#imported-by">2</a>)</i><i class="codelines"> (148)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - is td pretty-printing and formatting facilities for types from MTProto.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdsync" data-module="github.com/gotd/td" data-loc="304" data-importedbys="6" data-depheight="17" data-depdepth="1"><code>     <span class="order">129</span>. <a href="pkg/github.com/gotd/td/tdsync.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdsync.html">/tdsync</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdsync.html#imported-by">6</a>)</i><i class="codelines"> (304)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains some useful synchronization utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram" data-module="github.com/gotd/td" data-loc="3258" data-importedbys="0" data-depheight="34" data-depdepth="0"><code>     <span class="order">130</span>. <a href="pkg/github.com/gotd/td/telegram.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/telegram.html">/telegram</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram.html#imported-by">0</a>)</i><i class="codelines"> (3258)</i><i class="depheight"> (34)</i><i class="depdepth"> (0)</i><span class="pkg-summary"> - implements Telegram client.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/auth" data-module="github.com/gotd/td" data-loc="1001" data-importedbys="1" data-depheight="25" data-depdepth="1"><code>     <span class="order">131</span>. <a href="pkg/github.com/gotd/td/telegram/auth.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/auth.html">/auth</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/auth.html#imported-by">1</a>)</i><i class="codelines"> (1001)</i><i class="depheight"> (25)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides authentication on top of tg.Client.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/auth/qrlogin" data-module="github.com/gotd/td" data-loc="348" data-importedbys="1" data-depheight="21" data-depdepth="1"><code>     <span class="order">132</span>. <a href="pkg/github.com/gotd/td/telegram/auth/qrlogin.html" class="path-duplicate">github.com/gotd/td/telegram/auth</a><a href="pkg/github.com/gotd/td/telegram/auth/qrlogin.html">/qrlogin</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/auth/qrlogin.html#imported-by">1</a>)</i><i class="codelines"> (348)</i><i class="depheight"> (21)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides QR login flow implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/dcs" data-module="github.com/gotd/td" data-loc="1420" data-importedbys="2" data-depheight="31" data-depdepth="1"><code>     <span class="order">133</span>. <a href="pkg/github.com/gotd/td/telegram/dcs.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/dcs.html">/dcs</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/dcs.html#imported-by">2</a>)</i><i class="codelines"> (1420)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram DCs list and some helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/downloader" data-module="github.com/gotd/td" data-loc="1931" data-importedbys="1" data-depheight="31" data-depdepth="1"><code>     <span class="order">134</span>. <a href="pkg/github.com/gotd/td/telegram/downloader.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/downloader.html">/downloader</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/downloader.html#imported-by">1</a>)</i><i class="codelines"> (1931)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains downloading files helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/manager" data-module="github.com/gotd/td" data-loc="653" data-importedbys="1" data-depheight="33" data-depdepth="1"><code>     <span class="order">135</span>. <a href="pkg/github.com/gotd/td/telegram/internal/manager.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/internal/manager.html">/internal/manager</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/manager.html#imported-by">1</a>)</i><i class="codelines"> (653)</i><i class="depheight"> (33)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains connection management utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/upconv" data-module="github.com/gotd/td" data-loc="124" data-importedbys="1" data-depheight="21" data-depdepth="1"><code>     <span class="order">136</span>. <a href="pkg/github.com/gotd/td/telegram/internal/upconv.html" class="path-duplicate">github.com/gotd/td/telegram/internal</a><a href="pkg/github.com/gotd/td/telegram/internal/upconv.html">/upconv</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/upconv.html#imported-by">1</a>)</i><i class="codelines"> (124)</i><i class="depheight"> (21)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains updates conversion helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/version" data-module="github.com/gotd/td" data-loc="36" data-importedbys="2" data-depheight="16" data-depdepth="1"><code>     <span class="order">137</span>. <a href="pkg/github.com/gotd/td/telegram/internal/version.html" class="path-duplicate">github.com/gotd/td/telegram/internal</a><a href="pkg/github.com/gotd/td/telegram/internal/version.html">/version</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/version.html#imported-by">2</a>)</i><i class="codelines"> (36)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains gotd module version getter.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tg" data-module="github.com/gotd/td" data-loc="842297" data-importedbys="9" data-depheight="20" data-depdepth="1"><code>     <span class="order">138</span>. <a href="pkg/github.com/gotd/td/tg.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tg.html">/tg</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tg.html#imported-by">9</a>)</i><i class="codelines"> (842297)</i><i class="depheight"> (20)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains generated types from MTProto Telegram API.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tgerr" data-module="github.com/gotd/td" data-loc="229" data-importedbys="7" data-depheight="17" data-depdepth="1"><code>     <span class="order">139</span>. <a href="pkg/github.com/gotd/td/tgerr.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tgerr.html">/tgerr</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tgerr.html#imported-by">7</a>)</i><i class="codelines"> (229)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements helpers for error handling.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tmap" data-module="github.com/gotd/td" data-loc="71" data-importedbys="2" data-depheight="17" data-depdepth="1"><code>     <span class="order">140</span>. <a href="pkg/github.com/gotd/td/tmap.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tmap.html">/tmap</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tmap.html#imported-by">2</a>)</i><i class="codelines"> (71)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides type mapping facility that maps type id to type name.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/transport" data-module="github.com/gotd/td" data-loc="551" data-importedbys="4" data-depheight="29" data-depdepth="1"><code>     <span class="order">141</span>. <a href="pkg/github.com/gotd/td/transport.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/transport.html">/transport</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/transport.html#imported-by">4</a>)</i><i class="codelines"> (551)</i><i class="depheight"> (29)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains different MTProto transport implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/wsutil" data-module="github.com/gotd/td" data-loc="15" data-importedbys="2" data-depheight="28" data-depdepth="2"><code>     <span class="order">142</span>. <a href="pkg/github.com/gotd/td/wsutil.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/wsutil.html">/wsutil</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/wsutil.html#imported-by">2</a>)</i><i class="codelines"> (15)</i><i class="depheight"> (28)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains some Websocket utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress" data-module="github.com/klauspost/compress" data-loc="85" data-importedbys="1" data-depheight="4" data-depdepth="6"><code>     <span class="order">143</span>. <a href="pkg/github.com/klauspost/compress.html" class="path-duplicate">github.com</a><a href="pkg/github.com/klauspost/compress.html">/klauspost/compress</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress.html#imported-by">1</a>)</i><i class="codelines"> (85)</i><i class="depheight"> (4)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/flate" data-module="github.com/klauspost/compress" data-loc="8271" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order">144</span>. <a href="pkg/github.com/klauspost/compress/flate.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/flate.html">/flate</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/flate.html#imported-by">1</a>)</i><i class="codelines"> (8271)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the DEFLATE compressed data format, described in RFC 1951.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/fse" data-module="github.com/klauspost/compress" data-loc="1539" data-importedbys="1" data-depheight="15" data-depdepth="7"><code>     <span class="order">145</span>. <a href="pkg/github.com/klauspost/compress/fse.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/fse.html">/fse</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/fse.html#imported-by">1</a>)</i><i class="codelines"> (1539)</i><i class="depheight"> (15)</i><i class="depdepth"> (7)</i><span class="pkg-summary"> - provides Finite State Entropy encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/gzip" data-module="github.com/klauspost/compress" data-loc="670" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">146</span>. <a href="pkg/github.com/klauspost/compress/gzip.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/gzip.html">/gzip</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/gzip.html#imported-by">1</a>)</i><i class="codelines"> (670)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements reading and writing of gzip format compressed files, as specified in RFC 1952.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/huff0" data-module="github.com/klauspost/compress" data-loc="2956" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order">147</span>. <a href="pkg/github.com/klauspost/compress/huff0.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/huff0.html">/huff0</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/huff0.html#imported-by">1</a>)</i><i class="codelines"> (2956)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - This file contains the specialisation of Decoder.Decompress4X and Decoder.Decompress1X that use an asm implementation of thir main loops.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/cpuinfo" data-module="github.com/klauspost/compress" data-loc="44" data-importedbys="2" data-depheight="1" data-depdepth="6"><code>     <span class="order">148</span>. <a href="pkg/github.com/klauspost/compress/internal/cpuinfo.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/internal/cpuinfo.html">/internal/cpuinfo</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/cpuinfo.html#imported-by">2</a>)</i><i class="codelines"> (44)</i><i class="depheight"> (1)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - gives runtime info about the current CPU.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/le" data-module="github.com/klauspost/compress" data-loc="57" data-importedbys="3" data-depheight="2" data-depdepth="4"><code>     <span class="order">149</span>. <a href="pkg/github.com/klauspost/compress/internal/le.html" class="path-duplicate">github.com/klauspost/compress/internal</a><a href="pkg/github.com/klauspost/compress/internal/le.html">/le</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/le.html#imported-by">3</a>)</i><i class="codelines"> (57)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/snapref" data-module="github.com/klauspost/compress" data-loc="1016" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">150</span>. <a href="pkg/github.com/klauspost/compress/internal/snapref.html" class="path-duplicate">github.com/klauspost/compress/internal</a><a href="pkg/github.com/klauspost/compress/internal/snapref.html">/snapref</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/snapref.html#imported-by">1</a>)</i><i class="codelines"> (1016)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the Snappy compression format.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/zstd" data-module="github.com/klauspost/compress" data-loc="13531" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order">151</span>. <a href="pkg/github.com/klauspost/compress/zstd.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/zstd.html">/zstd</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/zstd.html#imported-by">1</a>)</i><i class="codelines"> (13531)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides decompression of zstandard files.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/zstd/internal/xxhash" data-module="github.com/klauspost/compress" data-loc="257" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">152</span>. <a href="pkg/github.com/klauspost/compress/zstd/internal/xxhash.html" class="path-duplicate">github.com/klauspost/compress/zstd</a><a href="pkg/github.com/klauspost/compress/zstd/internal/xxhash.html">/internal/xxhash</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/zstd/internal/xxhash.html#imported-by">1</a>)</i><i class="codelines"> (257)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls" data-module="github.com/refraction-networking/utls" data-loc="25388" data-importedbys="1" data-depheight="28" data-depdepth="4"><code>     <span class="order">153</span>. <a href="pkg/github.com/refraction-networking/utls.html" class="path-duplicate">github.com</a><a href="pkg/github.com/refraction-networking/utls.html">/refraction-networking/utls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls.html#imported-by">1</a>)</i><i class="codelines"> (25388)</i><i class="depheight"> (28)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/dicttls" data-module="github.com/refraction-networking/utls" data-loc="2593" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">154</span>. <a href="pkg/github.com/refraction-networking/utls/dicttls.html" class="path-duplicate">github.com/refraction-networking/utls</a><a href="pkg/github.com/refraction-networking/utls/dicttls.html">/dicttls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/dicttls.html#imported-by">1</a>)</i><i class="codelines"> (2593)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/boring" data-module="github.com/refraction-networking/utls" data-loc="20" data-importedbys="1" data-depheight="18" data-depdepth="5"><code>     <span class="order">155</span>. <a href="pkg/github.com/refraction-networking/utls/internal/boring.html" class="path-duplicate">github.com/refraction-networking/utls</a><a href="pkg/github.com/refraction-networking/utls/internal/boring.html">/internal/boring</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/boring.html#imported-by">1</a>)</i><i class="codelines"> (20)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/byteorder" data-module="github.com/refraction-networking/utls" data-loc="149" data-importedbys="3" data-depheight="1" data-depdepth="5"><code>     <span class="order">156</span>. <a href="pkg/github.com/refraction-networking/utls/internal/byteorder.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/byteorder.html">/byteorder</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/byteorder.html#imported-by">3</a>)</i><i class="codelines"> (149)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides functions for decoding and encoding little and big endian integer types from/to byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/fips140tls" data-module="github.com/refraction-networking/utls" data-loc="5" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">157</span>. <a href="pkg/github.com/refraction-networking/utls/internal/fips140tls.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/fips140tls.html">/fips140tls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/fips140tls.html#imported-by">1</a>)</i><i class="codelines"> (5)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/helper" data-module="github.com/refraction-networking/utls" data-loc="23" data-importedbys="1" data-depheight="18" data-depdepth="5"><code>     <span class="order">158</span>. <a href="pkg/github.com/refraction-networking/utls/internal/helper.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/helper.html">/helper</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/helper.html#imported-by">1</a>)</i><i class="codelines"> (23)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/hkdf" data-module="github.com/refraction-networking/utls" data-loc="24" data-importedbys="3" data-depheight="18" data-depdepth="5"><code>     <span class="order">159</span>. <a href="pkg/github.com/refraction-networking/utls/internal/hkdf.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/hkdf.html#imported-by">3</a>)</i><i class="codelines"> (24)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/hpke" data-module="github.com/refraction-networking/utls" data-loc="333" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order">160</span>. <a href="pkg/github.com/refraction-networking/utls/internal/hpke.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/hpke.html">/hpke</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/hpke.html#imported-by">1</a>)</i><i class="codelines"> (333)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/quicvarint" data-module="github.com/refraction-networking/utls" data-loc="146" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order">161</span>. <a href="pkg/github.com/refraction-networking/utls/internal/quicvarint.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/quicvarint.html">/quicvarint</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/quicvarint.html#imported-by">1</a>)</i><i class="codelines"> (146)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/quicvarint/protocol" data-module="github.com/refraction-networking/utls" data-loc="157" data-importedbys="1" data-depheight="15" data-depdepth="6"><code>     <span class="order">162</span>. <a href="pkg/github.com/refraction-networking/utls/internal/quicvarint/protocol.html" class="path-duplicate">github.com/refraction-networking/utls/internal/quicvarint</a><a href="pkg/github.com/refraction-networking/utls/internal/quicvarint/protocol.html">/protocol</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/quicvarint/protocol.html#imported-by">1</a>)</i><i class="codelines"> (157)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/tls12" data-module="github.com/refraction-networking/utls" data-loc="69" data-importedbys="1" data-depheight="20" data-depdepth="5"><code>     <span class="order">163</span>. <a href="pkg/github.com/refraction-networking/utls/internal/tls12.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/tls12.html">/tls12</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/tls12.html#imported-by">1</a>)</i><i class="codelines"> (69)</i><i class="depheight"> (20)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/tls13" data-module="github.com/refraction-networking/utls" data-loc="210" data-importedbys="1" data-depheight="19" data-depdepth="5"><code>     <span class="order">164</span>. <a href="pkg/github.com/refraction-networking/utls/internal/tls13.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/tls13.html">/tls13</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/tls13.html#imported-by">1</a>)</i><i class="codelines"> (210)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/base64" data-module="github.com/segmentio/asm" data-loc="255" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">165</span>. <a href="pkg/github.com/segmentio/asm/base64.html" class="path-duplicate">github.com</a><a href="pkg/github.com/segmentio/asm/base64.html">/segmentio/asm/base64</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/base64.html#imported-by">1</a>)</i><i class="codelines"> (255)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu" data-module="github.com/segmentio/asm" data-loc="22" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order">166</span>. <a href="pkg/github.com/segmentio/asm/cpu.html" class="path-duplicate">github.com/segmentio/asm</a><a href="pkg/github.com/segmentio/asm/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu.html#imported-by">1</a>)</i><i class="codelines"> (22)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - Pakage cpu provides APIs to detect CPU features available at runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/arm" data-module="github.com/segmentio/asm" data-loc="80" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">167</span>. <a href="pkg/github.com/segmentio/asm/cpu/arm.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/arm.html">/arm</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/arm.html#imported-by">1</a>)</i><i class="codelines"> (80)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/arm64" data-module="github.com/segmentio/asm" data-loc="74" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">168</span>. <a href="pkg/github.com/segmentio/asm/cpu/arm64.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/arm64.html">/arm64</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/arm64.html#imported-by">1</a>)</i><i class="codelines"> (74)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/cpuid" data-module="github.com/segmentio/asm" data-loc="32" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">169</span>. <a href="pkg/github.com/segmentio/asm/cpu/cpuid.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/cpuid.html">/cpuid</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/cpuid.html#imported-by">3</a>)</i><i class="codelines"> (32)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides generic types used to represent CPU features supported by the architecture.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/x86" data-module="github.com/segmentio/asm" data-loc="76" data-importedbys="2" data-depheight="15" data-depdepth="3"><code>     <span class="order">170</span>. <a href="pkg/github.com/segmentio/asm/cpu/x86.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/x86.html">/x86</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/x86.html#imported-by">2</a>)</i><i class="codelines"> (76)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/internal/unsafebytes" data-module="github.com/segmentio/asm" data-loc="20" data-importedbys="1" data-depheight="2" data-depdepth="3"><code>     <span class="order">171</span>. <a href="pkg/github.com/segmentio/asm/internal/unsafebytes.html" class="path-duplicate">github.com/segmentio/asm</a><a href="pkg/github.com/segmentio/asm/internal/unsafebytes.html">/internal/unsafebytes</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/internal/unsafebytes.html#imported-by">1</a>)</i><i class="codelines"> (20)</i><i class="depheight"> (2)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute" data-module="go.opentelemetry.io/otel" data-loc="2243" data-importedbys="3" data-depheight="16" data-depdepth="1"><code>     <span class="order">172</span>. <a href="pkg/go.opentelemetry.io/otel/attribute.html">go.opentelemetry.io/otel/attribute</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute.html#imported-by">3</a>)</i><i class="codelines"> (2243)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides key and value attributes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute/internal" data-module="go.opentelemetry.io/otel" data-loc="75" data-importedbys="1" data-depheight="10" data-depdepth="2"><code>     <span class="order">173</span>. <a href="pkg/go.opentelemetry.io/otel/attribute/internal.html" class="path-duplicate">go.opentelemetry.io/otel/attribute</a><a href="pkg/go.opentelemetry.io/otel/attribute/internal.html">/internal</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute/internal.html#imported-by">1</a>)</i><i class="codelines"> (75)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provide several helper functions for some commonly used logic of processing attributes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute/internal/xxhash" data-module="go.opentelemetry.io/otel" data-loc="64" data-importedbys="1" data-depheight="12" data-depdepth="2"><code>     <span class="order">174</span>. <a href="pkg/go.opentelemetry.io/otel/attribute/internal/xxhash.html" class="path-duplicate">go.opentelemetry.io/otel/attribute/internal</a><a href="pkg/go.opentelemetry.io/otel/attribute/internal/xxhash.html">/xxhash</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute/internal/xxhash.html#imported-by">1</a>)</i><i class="codelines"> (64)</i><i class="depheight"> (12)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a wrapper around the xxhash library for attribute hashing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/codes" data-module="go.opentelemetry.io/otel" data-loc="116" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">175</span>. <a href="pkg/go.opentelemetry.io/otel/codes.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/codes.html">/codes</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/codes.html#imported-by">1</a>)</i><i class="codelines"> (116)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - defines the canonical error codes used by OpenTelemetry.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/semconv/v1.41.0" data-module="go.opentelemetry.io/otel" data-loc="17401" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">176</span>. <a href="pkg/go.opentelemetry.io/otel/semconv/v1.41.0.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/semconv/v1.41.0.html">/semconv/v1.41.0</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/semconv/v1.41.0.html#imported-by">1</a>)</i><i class="codelines"> (17401)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements OpenTelemetry semantic conventions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace" data-module="go.opentelemetry.io/otel/trace" data-loc="2383" data-importedbys="2" data-depheight="18" data-depdepth="1"><code>     <span class="order">177</span>. <a href="pkg/go.opentelemetry.io/otel/trace.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/trace.html">/trace</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace.html#imported-by">2</a>)</i><i class="codelines"> (2383)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides an implementation of the tracing part of the OpenTelemetry API.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace/embedded" data-module="go.opentelemetry.io/otel/trace" data-loc="45" data-importedbys="1" data-depheight="1" data-depdepth="2"><code>     <span class="order">178</span>. <a href="pkg/go.opentelemetry.io/otel/trace/embedded.html" class="path-duplicate">go.opentelemetry.io/otel/trace</a><a href="pkg/go.opentelemetry.io/otel/trace/embedded.html">/embedded</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace/embedded.html#imported-by">1</a>)</i><i class="codelines"> (45)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides interfaces embedded within the [OpenTelemetry trace API].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace/internal/telemetry" data-module="go.opentelemetry.io/otel/trace" data-loc="1525" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">179</span>. <a href="pkg/go.opentelemetry.io/otel/trace/internal/telemetry.html" class="path-duplicate">go.opentelemetry.io/otel/trace</a><a href="pkg/go.opentelemetry.io/otel/trace/internal/telemetry.html">/internal/telemetry</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace/internal/telemetry.html#imported-by">1</a>)</i><i class="codelines"> (1525)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a lightweight representations of OpenTelemetry telemetry that is compatible with the OTLP JSON protobuf encoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.uber.org/atomic" data-module="go.uber.org/atomic" data-loc="1716" data-importedbys="3" data-depheight="16" data-depdepth="1"><code>     <span class="order">180</span>. <a href="pkg/go.uber.org/atomic.html">go.uber.org/atomic</a><i class="importedbys"> (<a href="dep/go.uber.org/atomic.html#imported-by">3</a>)</i><i class="codelines"> (1716)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides simple wrappers around numerics to enforce atomic access.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.uber.org/multierr" data-module="go.uber.org/multierr" data-loc="694" data-importedbys="9" data-depheight="15" data-depdepth="1"><code>     <span class="order">181</span>. <a href="pkg/go.uber.org/multierr.html" class="path-duplicate">go.uber.org</a><a href="pkg/go.uber.org/multierr.html">/multierr</a><i class="importedbys"> (<a href="dep/go.uber.org/multierr.html#imported-by">9</a>)</i><i class="codelines"> (694)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - allows combining one or more errors together.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/chacha20" data-module="golang.org/x/crypto" data-loc="453" data-importedbys="1" data-depheight="18" data-depdepth="6"><code>     <span class="order">182</span>. <a href="pkg/golang.org/x/crypto/chacha20.html">golang.org/x/crypto/chacha20</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/chacha20.html#imported-by">1</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (18)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/chacha20poly1305" data-module="golang.org/x/crypto" data-loc="380" data-importedbys="2" data-depheight="19" data-depdepth="5"><code>     <span class="order">183</span>. <a href="pkg/golang.org/x/crypto/chacha20poly1305.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/chacha20poly1305.html">/chacha20poly1305</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/chacha20poly1305.html#imported-by">2</a>)</i><i class="codelines"> (380)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/cryptobyte" data-module="golang.org/x/crypto" data-loc="1358" data-importedbys="2" data-depheight="17" data-depdepth="5"><code>     <span class="order">184</span>. <a href="pkg/golang.org/x/crypto/cryptobyte.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/cryptobyte.html">/cryptobyte</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/cryptobyte.html#imported-by">2</a>)</i><i class="codelines"> (1358)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/cryptobyte/asn1" data-module="golang.org/x/crypto" data-loc="46" data-importedbys="1" data-depheight="1" data-depdepth="6"><code>     <span class="order">185</span>. <a href="pkg/golang.org/x/crypto/cryptobyte/asn1.html" class="path-duplicate">golang.org/x/crypto/cryptobyte</a><a href="pkg/golang.org/x/crypto/cryptobyte/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/cryptobyte/asn1.html#imported-by">1</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/hkdf" data-module="golang.org/x/crypto" data-loc="100" data-importedbys="1" data-depheight="20" data-depdepth="5"><code>     <span class="order">186</span>. <a href="pkg/golang.org/x/crypto/hkdf.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/hkdf.html#imported-by">1</a>)</i><i class="codelines"> (100)</i><i class="depheight"> (20)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/internal/alias" data-module="golang.org/x/crypto" data-loc="31" data-importedbys="2" data-depheight="2" data-depdepth="6"><code>     <span class="order">187</span>. <a href="pkg/golang.org/x/crypto/internal/alias.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/internal/alias.html">/internal/alias</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/internal/alias.html#imported-by">2</a>)</i><i class="codelines"> (31)</i><i class="depheight"> (2)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/internal/poly1305" data-module="golang.org/x/crypto" data-loc="458" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">188</span>. <a href="pkg/golang.org/x/crypto/internal/poly1305.html" class="path-duplicate">golang.org/x/crypto/internal</a><a href="pkg/golang.org/x/crypto/internal/poly1305.html">/poly1305</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/internal/poly1305.html#imported-by">1</a>)</i><i class="codelines"> (458)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements Poly1305 one-time message authentication code as specified in https://cr.yp.to/mac/poly1305-20050329.pdf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/pbkdf2" data-module="golang.org/x/crypto" data-loc="30" data-importedbys="2" data-depheight="18" data-depdepth="3"><code>     <span class="order">189</span>. <a href="pkg/golang.org/x/crypto/pbkdf2.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/pbkdf2.html#imported-by">2</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (18)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/sha3" data-module="golang.org/x/crypto" data-loc="893" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">190</span>. <a href="pkg/golang.org/x/crypto/sha3.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/sha3.html#imported-by">1</a>)</i><i class="codelines"> (893)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/net/internal/socks" data-module="golang.org/x/net" data-loc="485" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">191</span>. <a href="pkg/golang.org/x/net/internal/socks.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/net/internal/socks.html">/net/internal/socks</a><i class="importedbys"> (<a href="dep/golang.org/x/net/internal/socks.html#imported-by">1</a>)</i><i class="codelines"> (485)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a SOCKS version 5 client implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/net/proxy" data-module="golang.org/x/net" data-loc="429" data-importedbys="1" data-depheight="16" data-depdepth="1"><code>     <span class="order">192</span>. <a href="pkg/golang.org/x/net/proxy.html" class="path-duplicate">golang.org/x/net</a><a href="pkg/golang.org/x/net/proxy.html">/proxy</a><i class="importedbys"> (<a href="dep/golang.org/x/net/proxy.html#imported-by">1</a>)</i><i class="codelines"> (429)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides support for a variety of protocols to proxy network data.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sync/errgroup" data-module="golang.org/x/sync" data-loc="151" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">193</span>. <a href="pkg/golang.org/x/sync/errgroup.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/sync/errgroup.html">/sync/errgroup</a><i class="importedbys"> (<a href="dep/golang.org/x/sync/errgroup.html#imported-by">1</a>)</i><i class="codelines"> (151)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides synchronization, error propagation, and Context cancellation for groups of goroutines working on subtasks of a common task.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sync/singleflight" data-module="golang.org/x/sync" data-loc="214" data-importedbys="2" data-depheight="16" data-depdepth="1"><code>     <span class="order">194</span>. <a href="pkg/golang.org/x/sync/singleflight.html" class="path-duplicate">golang.org/x/sync</a><a href="pkg/golang.org/x/sync/singleflight.html">/singleflight</a><i class="importedbys"> (<a href="dep/golang.org/x/sync/singleflight.html#imported-by">2</a>)</i><i class="codelines"> (214)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides a duplicate function call suppression mechanism.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sys/cpu" data-module="golang.org/x/sys" data-loc="850" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order">195</span>. <a href="pkg/golang.org/x/sys/cpu.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/sys/cpu.html">/sys/cpu</a><i class="importedbys"> (<a href="dep/golang.org/x/sys/cpu.html#imported-by">6</a>)</i><i class="codelines"> (850)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements processor feature detection for various CPU architectures.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash" data-module="" data-loc="92" data-importedbys="36" data-depheight="9" data-depdepth="3"><code>     <span class="order">196</span>. <a href="pkg/hash.html">hash</a><i class="importedbys"> (<a href="dep/hash.html#imported-by">36</a>)</i><i class="codelines"> (92)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides interfaces for hash functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash/adler32" data-module="" data-loc="129" data-importedbys="1" data-depheight="10" data-depdepth="7"><code>     <span class="order">197</span>. <a href="pkg/hash/adler32.html" class="path-duplicate">hash</a><a href="pkg/hash/adler32.html">/adler32</a><i class="importedbys"> (<a href="dep/hash/adler32.html#imported-by">1</a>)</i><i class="codelines"> (129)</i><i class="depheight"> (10)</i><i class="depdepth"> (7)</i><span class="pkg-summary"> - implements the Adler-32 checksum.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash/crc32" data-module="" data-loc="586" data-importedbys="7" data-depheight="10" data-depdepth="4"><code>     <span class="order">198</span>. <a href="pkg/hash/crc32.html" class="path-duplicate">hash</a><a href="pkg/hash/crc32.html">/crc32</a><i class="importedbys"> (<a href="dep/hash/crc32.html#imported-by">7</a>)</i><i class="codelines"> (586)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the 32-bit cyclic redundancy check, or CRC-32, checksum.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-image" data-module="" data-loc="2102" data-importedbys="2" data-depheight="11" data-depdepth="3"><code>     <span class="order">199</span>. <a href="pkg/image.html">image</a><i class="importedbys"> (<a href="dep/image.html#imported-by">2</a>)</i><i class="codelines"> (2102)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a basic 2-D image library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-image/color" data-module="" data-loc="720" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">200</span>. <a href="pkg/image/color.html" class="path-duplicate">image</a><a href="pkg/image/color.html">/color</a><i class="importedbys"> (<a href="dep/image/color.html#imported-by">2</a>)</i><i class="codelines"> (720)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a basic color library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/abi" data-module="" data-loc="1501" data-importedbys="10" data-depheight="2" data-depdepth="3"><code>     <span class="order">201</span>. <a href="pkg/internal/abi.html">internal/abi</a><i class="importedbys"> (<a href="dep/internal/abi.html#imported-by">10</a>)</i><i class="codelines"> (1501)</i><i class="depheight"> (2)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/asan" data-module="" data-loc="27" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">202</span>. <a href="pkg/internal/asan.html" class="path-duplicate">internal</a><a href="pkg/internal/asan.html">/asan</a><i class="importedbys"> (<a href="dep/internal/asan.html#imported-by">2</a>)</i><i class="codelines"> (27)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the address sanitizer.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/bisect" data-module="" data-loc="778" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">203</span>. <a href="pkg/internal/bisect.html" class="path-duplicate">internal</a><a href="pkg/internal/bisect.html">/bisect</a><i class="importedbys"> (<a href="dep/internal/bisect.html#imported-by">1</a>)</i><i class="codelines"> (778)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - can be used by compilers and other programs to serve as a target for the bisect debugging tool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/bytealg" data-module="" data-loc="299" data-importedbys="17" data-depheight="3" data-depdepth="3"><code>     <span class="order">204</span>. <a href="pkg/internal/bytealg.html" class="path-duplicate">internal</a><a href="pkg/internal/bytealg.html">/bytealg</a><i class="importedbys"> (<a href="dep/internal/bytealg.html#imported-by">17</a>)</i><i class="codelines"> (299)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/byteorder" data-module="" data-loc="149" data-importedbys="17" data-depheight="1" data-depdepth="3"><code>     <span class="order">205</span>. <a href="pkg/internal/byteorder.html" class="path-duplicate">internal</a><a href="pkg/internal/byteorder.html">/byteorder</a><i class="importedbys"> (<a href="dep/internal/byteorder.html#imported-by">17</a>)</i><i class="codelines"> (149)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides functions for decoding and encoding little and big endian integer types from/to byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/chacha8rand" data-module="" data-loc="405" data-importedbys="2" data-depheight="3" data-depdepth="4"><code>     <span class="order">206</span>. <a href="pkg/internal/chacha8rand.html" class="path-duplicate">internal</a><a href="pkg/internal/chacha8rand.html">/chacha8rand</a><i class="importedbys"> (<a href="dep/internal/chacha8rand.html#imported-by">2</a>)</i><i class="codelines"> (405)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a pseudorandom generator based on ChaCha8.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/coverage/rtcov" data-module="" data-loc="88" data-importedbys="1" data-depheight="2" data-depdepth="4"><code>     <span class="order">207</span>. <a href="pkg/internal/coverage/rtcov.html" class="path-duplicate">internal</a><a href="pkg/internal/coverage/rtcov.html">/coverage/rtcov</a><i class="importedbys"> (<a href="dep/internal/coverage/rtcov.html#imported-by">1</a>)</i><i class="codelines"> (88)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/cpu" data-module="" data-loc="692" data-importedbys="10" data-depheight="2" data-depdepth="4"><code>     <span class="order">208</span>. <a href="pkg/internal/cpu.html" class="path-duplicate">internal</a><a href="pkg/internal/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/internal/cpu.html#imported-by">10</a>)</i><i class="codelines"> (692)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements processor feature detection used by the Go standard library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/filepathlite" data-module="" data-loc="326" data-importedbys="2" data-depheight="12" data-depdepth="3"><code>     <span class="order">209</span>. <a href="pkg/internal/filepathlite.html" class="path-duplicate">internal</a><a href="pkg/internal/filepathlite.html">/filepathlite</a><i class="importedbys"> (<a href="dep/internal/filepathlite.html#imported-by">2</a>)</i><i class="codelines"> (326)</i><i class="depheight"> (12)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of path/filepath, only using packages which may be imported by "os".</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/fmtsort" data-module="" data-loc="154" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order">210</span>. <a href="pkg/internal/fmtsort.html" class="path-duplicate">internal</a><a href="pkg/internal/fmtsort.html">/fmtsort</a><i class="importedbys"> (<a href="dep/internal/fmtsort.html#imported-by">1</a>)</i><i class="codelines"> (154)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a general stable ordering mechanism for maps, on behalf of the fmt and text/template packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goarch" data-module="" data-loc="110" data-importedbys="17" data-depheight="1" data-depdepth="3"><code>     <span class="order">211</span>. <a href="pkg/internal/goarch.html" class="path-duplicate">internal</a><a href="pkg/internal/goarch.html">/goarch</a><i class="importedbys"> (<a href="dep/internal/goarch.html#imported-by">17</a>)</i><i class="codelines"> (110)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - package goarch contains GOARCH-specific constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/godebug" data-module="" data-loc="316" data-importedbys="13" data-depheight="8" data-depdepth="3"><code>     <span class="order">212</span>. <a href="pkg/internal/godebug.html" class="path-duplicate">internal</a><a href="pkg/internal/godebug.html">/godebug</a><i class="importedbys"> (<a href="dep/internal/godebug.html#imported-by">13</a>)</i><i class="codelines"> (316)</i><i class="depheight"> (8)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - makes the settings in the $GODEBUG environment variable available to other packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/godebugs" data-module="" data-loc="116" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">213</span>. <a href="pkg/internal/godebugs.html" class="path-duplicate">internal</a><a href="pkg/internal/godebugs.html">/godebugs</a><i class="importedbys"> (<a href="dep/internal/godebugs.html#imported-by">2</a>)</i><i class="codelines"> (116)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a table of known GODEBUG settings, for use by a variety of other packages, including internal/godebug, runtime, runtime/metrics, and cmd/go/internal/load.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goexperiment" data-module="" data-loc="291" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">214</span>. <a href="pkg/internal/goexperiment.html" class="path-duplicate">internal</a><a href="pkg/internal/goexperiment.html">/goexperiment</a><i class="importedbys"> (<a href="dep/internal/goexperiment.html#imported-by">1</a>)</i><i class="codelines"> (291)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements support for toolchain experiments.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goos" data-module="" data-loc="41" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">215</span>. <a href="pkg/internal/goos.html" class="path-duplicate">internal</a><a href="pkg/internal/goos.html">/goos</a><i class="importedbys"> (<a href="dep/internal/goos.html#imported-by">3</a>)</i><i class="codelines"> (41)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - package goos contains GOOS-specific constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/msan" data-module="" data-loc="37" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">216</span>. <a href="pkg/internal/msan.html" class="path-duplicate">internal</a><a href="pkg/internal/msan.html">/msan</a><i class="importedbys"> (<a href="dep/internal/msan.html#imported-by">2</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the memory sanitizer.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/nettrace" data-module="" data-loc="46" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">217</span>. <a href="pkg/internal/nettrace.html" class="path-duplicate">internal</a><a href="pkg/internal/nettrace.html">/nettrace</a><i class="importedbys"> (<a href="dep/internal/nettrace.html#imported-by">2</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains internal hooks for tracing activity in the net package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/oserror" data-module="" data-loc="18" data-importedbys="2" data-depheight="8" data-depdepth="4"><code>     <span class="order">218</span>. <a href="pkg/internal/oserror.html" class="path-duplicate">internal</a><a href="pkg/internal/oserror.html">/oserror</a><i class="importedbys"> (<a href="dep/internal/oserror.html#imported-by">2</a>)</i><i class="codelines"> (18)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines errors values used in the os package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/poll" data-module="" data-loc="2390" data-importedbys="3" data-depheight="11" data-depdepth="3"><code>     <span class="order">219</span>. <a href="pkg/internal/poll.html" class="path-duplicate">internal</a><a href="pkg/internal/poll.html">/poll</a><i class="importedbys"> (<a href="dep/internal/poll.html#imported-by">3</a>)</i><i class="codelines"> (2390)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - supports non-blocking I/O on file descriptors with polling.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/profilerecord" data-module="" data-loc="28" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">220</span>. <a href="pkg/internal/profilerecord.html" class="path-duplicate">internal</a><a href="pkg/internal/profilerecord.html">/profilerecord</a><i class="importedbys"> (<a href="dep/internal/profilerecord.html#imported-by">1</a>)</i><i class="codelines"> (28)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - holds internal types used to represent profiling records with deep stack traces.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/race" data-module="" data-loc="66" data-importedbys="6" data-depheight="3" data-depdepth="3"><code>     <span class="order">221</span>. <a href="pkg/internal/race.html" class="path-duplicate">internal</a><a href="pkg/internal/race.html">/race</a><i class="importedbys"> (<a href="dep/internal/race.html#imported-by">6</a>)</i><i class="codelines"> (66)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the race detector.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/reflectlite" data-module="" data-loc="1201" data-importedbys="3" data-depheight="6" data-depdepth="3"><code>     <span class="order">222</span>. <a href="pkg/internal/reflectlite.html" class="path-duplicate">internal</a><a href="pkg/internal/reflectlite.html">/reflectlite</a><i class="importedbys"> (<a href="dep/internal/reflectlite.html#imported-by">3</a>)</i><i class="codelines"> (1201)</i><i class="depheight"> (6)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements lightweight version of reflect, not using any package except for "runtime", "unsafe", and "internal/abi"</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/atomic" data-module="" data-loc="876" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">223</span>. <a href="pkg/internal/runtime/atomic.html" class="path-duplicate">internal</a><a href="pkg/internal/runtime/atomic.html">/runtime/atomic</a><i class="importedbys"> (<a href="dep/internal/runtime/atomic.html#imported-by">2</a>)</i><i class="codelines"> (876)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides atomic operations, independent of sync/atomic, to the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/cgroup" data-module="" data-loc="975" data-importedbys="1" data-depheight="4" data-depdepth="4"><code>     <span class="order">224</span>. <a href="pkg/internal/runtime/cgroup.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/cgroup.html">/cgroup</a><i class="importedbys"> (<a href="dep/internal/runtime/cgroup.html#imported-by">1</a>)</i><i class="codelines"> (975)</i><i class="depheight"> (4)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/exithook" data-module="" data-loc="85" data-importedbys="1" data-depheight="3" data-depdepth="4"><code>     <span class="order">225</span>. <a href="pkg/internal/runtime/exithook.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/exithook.html">/exithook</a><i class="importedbys"> (<a href="dep/internal/runtime/exithook.html#imported-by">1</a>)</i><i class="codelines"> (85)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides limited support for on-exit cleanup.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/gc" data-module="" data-loc="168" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">226</span>. <a href="pkg/internal/runtime/gc.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/gc.html">/gc</a><i class="importedbys"> (<a href="dep/internal/runtime/gc.html#imported-by">2</a>)</i><i class="codelines"> (168)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/gc/scan" data-module="" data-loc="289" data-importedbys="1" data-depheight="3" data-depdepth="4"><code>     <span class="order">227</span>. <a href="pkg/internal/runtime/gc/scan.html" class="path-duplicate">internal/runtime/gc</a><a href="pkg/internal/runtime/gc/scan.html">/scan</a><i class="importedbys"> (<a href="dep/internal/runtime/gc/scan.html#imported-by">1</a>)</i><i class="codelines"> (289)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/maps" data-module="" data-loc="4482" data-importedbys="2" data-depheight="4" data-depdepth="4"><code>     <span class="order">228</span>. <a href="pkg/internal/runtime/maps.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/maps.html">/maps</a><i class="importedbys"> (<a href="dep/internal/runtime/maps.html#imported-by">2</a>)</i><i class="codelines"> (4482)</i><i class="depheight"> (4)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements Go's builtin map type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/math" data-module="" data-loc="62" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">229</span>. <a href="pkg/internal/runtime/math.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/math.html">/math</a><i class="importedbys"> (<a href="dep/internal/runtime/math.html#imported-by">2</a>)</i><i class="codelines"> (62)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/pprof/label" data-module="" data-loc="25" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">230</span>. <a href="pkg/internal/runtime/pprof/label.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/pprof/label.html">/pprof/label</a><i class="importedbys"> (<a href="dep/internal/runtime/pprof/label.html#imported-by">1</a>)</i><i class="codelines"> (25)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides common declarations used by both the runtime and runtime/pprof packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/sys" data-module="" data-loc="365" data-importedbys="6" data-depheight="2" data-depdepth="4"><code>     <span class="order">231</span>. <a href="pkg/internal/runtime/sys.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/sys.html">/sys</a><i class="importedbys"> (<a href="dep/internal/runtime/sys.html#imported-by">6</a>)</i><i class="codelines"> (365)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - package sys contains system- and configuration- and architecture-specific constants used by the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/syscall/linux" data-module="" data-loc="161" data-importedbys="3" data-depheight="2" data-depdepth="4"><code>     <span class="order">232</span>. <a href="pkg/internal/runtime/syscall/linux.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/syscall/linux.html">/syscall/linux</a><i class="importedbys"> (<a href="dep/internal/runtime/syscall/linux.html#imported-by">3</a>)</i><i class="codelines"> (161)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides the syscall primitives required for the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/saferio" data-module="" data-loc="132" data-importedbys="1" data-depheight="9" data-depdepth="5"><code>     <span class="order">233</span>. <a href="pkg/internal/saferio.html" class="path-duplicate">internal</a><a href="pkg/internal/saferio.html">/saferio</a><i class="importedbys"> (<a href="dep/internal/saferio.html#imported-by">1</a>)</i><i class="codelines"> (132)</i><i class="depheight"> (9)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides I/O functions that avoid allocating large amounts of memory unnecessarily.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/singleflight" data-module="" data-loc="123" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">234</span>. <a href="pkg/internal/singleflight.html" class="path-duplicate">internal</a><a href="pkg/internal/singleflight.html">/singleflight</a><i class="importedbys"> (<a href="dep/internal/singleflight.html#imported-by">1</a>)</i><i class="codelines"> (123)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a duplicate function call suppression mechanism.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/strconv" data-module="" data-loc="4036" data-importedbys="9" data-depheight="3" data-depdepth="3"><code>     <span class="order">235</span>. <a href="pkg/internal/strconv.html" class="path-duplicate">internal</a><a href="pkg/internal/strconv.html">/strconv</a><i class="importedbys"> (<a href="dep/internal/strconv.html#imported-by">9</a>)</i><i class="codelines"> (4036)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/stringslite" data-module="" data-loc="150" data-importedbys="10" data-depheight="4" data-depdepth="3"><code>     <span class="order">236</span>. <a href="pkg/internal/stringslite.html" class="path-duplicate">internal</a><a href="pkg/internal/stringslite.html">/stringslite</a><i class="importedbys"> (<a href="dep/internal/stringslite.html#imported-by">10</a>)</i><i class="codelines"> (150)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of strings, only using packages that may be imported by "os".</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/sync" data-module="" data-loc="1010" data-importedbys="2" data-depheight="4" data-depdepth="3"><code>     <span class="order">237</span>. <a href="pkg/internal/sync.html" class="path-duplicate">internal</a><a href="pkg/internal/sync.html">/sync</a><i class="importedbys"> (<a href="dep/internal/sync.html#imported-by">2</a>)</i><i class="codelines"> (1010)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic synchronization primitives such as mutual exclusion locks to internal packages (including ones that depend on sync).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/synctest" data-module="" data-loc="105" data-importedbys="1" data-depheight="3" data-depdepth="3"><code>     <span class="order">238</span>. <a href="pkg/internal/synctest.html" class="path-duplicate">internal</a><a href="pkg/internal/synctest.html">/synctest</a><i class="importedbys"> (<a href="dep/internal/synctest.html#imported-by">1</a>)</i><i class="codelines"> (105)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides support for testing concurrent code.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/syscall/execenv" data-module="" data-loc="19" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order">239</span>. <a href="pkg/internal/syscall/execenv.html" class="path-duplicate">internal</a><a href="pkg/internal/syscall/execenv.html">/syscall/execenv</a><i class="importedbys"> (<a href="dep/internal/syscall/execenv.html#imported-by">1</a>)</i><i class="codelines"> (19)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/syscall/unix" data-module="" data-loc="777" data-importedbys="4" data-depheight="10" data-depdepth="3"><code>     <span class="order">240</span>. <a href="pkg/internal/syscall/unix.html" class="path-duplicate">internal/syscall</a><a href="pkg/internal/syscall/unix.html">/unix</a><i class="importedbys"> (<a href="dep/internal/syscall/unix.html#imported-by">4</a>)</i><i class="codelines"> (777)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/testlog" data-module="" data-loc="113" data-importedbys="1" data-depheight="7" data-depdepth="3"><code>     <span class="order">241</span>. <a href="pkg/internal/testlog.html" class="path-duplicate">internal</a><a href="pkg/internal/testlog.html">/testlog</a><i class="importedbys"> (<a href="dep/internal/testlog.html#imported-by">1</a>)</i><i class="codelines"> (113)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a back-channel communication path between tests and package os, so that cmd/go can see which environment variables and files a test consults.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/trace/tracev2" data-module="" data-loc="707" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">242</span>. <a href="pkg/internal/trace/tracev2.html" class="path-duplicate">internal</a><a href="pkg/internal/trace/tracev2.html">/trace/tracev2</a><i class="importedbys"> (<a href="dep/internal/trace/tracev2.html#imported-by">1</a>)</i><i class="codelines"> (707)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains definitions for the v2 execution trace wire format.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/unsafeheader" data-module="" data-loc="37" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">243</span>. <a href="pkg/internal/unsafeheader.html" class="path-duplicate">internal</a><a href="pkg/internal/unsafeheader.html">/unsafeheader</a><i class="importedbys"> (<a href="dep/internal/unsafeheader.html#imported-by">2</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains header declarations for the Go runtime's slice and string implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-io" data-module="" data-loc="1089" data-importedbys="87" data-depheight="8" data-depdepth="2"><code>     <span class="order">244</span>. <a href="pkg/io.html">io</a><i class="importedbys"> (<a href="dep/io.html#imported-by">87</a>)</i><i class="codelines"> (1089)</i><i class="depheight"> (8)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides basic interfaces to I/O primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-io/fs" data-module="" data-loc="1003" data-importedbys="8" data-depheight="11" data-depdepth="3"><code>     <span class="order">245</span>. <a href="pkg/io/fs.html" class="path-duplicate">io</a><a href="pkg/io/fs.html">/fs</a><i class="importedbys"> (<a href="dep/io/fs.html#imported-by">8</a>)</i><i class="codelines"> (1003)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines basic interfaces to a file system.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-iter" data-module="" data-loc="473" data-importedbys="6" data-depheight="6" data-depdepth="3"><code>     <span class="order">246</span>. <a href="pkg/iter.html">iter</a><i class="importedbys"> (<a href="dep/iter.html#imported-by">6</a>)</i><i class="codelines"> (473)</i><i class="depheight"> (6)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic definitions and operations related to iterators over sequences.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-log" data-module="" data-loc="483" data-importedbys="6" data-depheight="15" data-depdepth="4"><code>     <span class="order">247</span>. <a href="pkg/log.html">log</a><i class="importedbys"> (<a href="dep/log.html#imported-by">6</a>)</i><i class="codelines"> (483)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a simple logging package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-log/internal" data-module="" data-loc="12" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">248</span>. <a href="pkg/log/internal.html" class="path-duplicate">log</a><a href="pkg/log/internal.html">/internal</a><i class="importedbys"> (<a href="dep/log/internal.html#imported-by">1</a>)</i><i class="codelines"> (12)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains definitions used by both log and log/slog.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-maps" data-module="" data-loc="137" data-importedbys="4" data-depheight="7" data-depdepth="4"><code>     <span class="order">249</span>. <a href="pkg/maps.html">maps</a><i class="importedbys"> (<a href="dep/maps.html#imported-by">4</a>)</i><i class="codelines"> (137)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines various functions useful with maps of any type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math" data-module="" data-loc="6016" data-importedbys="36" data-depheight="3" data-depdepth="3"><code>     <span class="order">250</span>. <a href="pkg/math.html">math</a><i class="importedbys"> (<a href="dep/math.html#imported-by">36</a>)</i><i class="codelines"> (6016)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic constants and mathematical functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/big" data-module="" data-loc="9692" data-importedbys="18" data-depheight="15" data-depdepth="3"><code>     <span class="order">251</span>. <a href="pkg/math/big.html" class="path-duplicate">math</a><a href="pkg/math/big.html">/big</a><i class="importedbys"> (<a href="dep/math/big.html#imported-by">18</a>)</i><i class="codelines"> (9692)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements arbitrary-precision arithmetic (big numbers).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/bits" data-module="" data-loc="693" data-importedbys="49" data-depheight="2" data-depdepth="2"><code>     <span class="order">252</span>. <a href="pkg/math/bits.html" class="path-duplicate">math</a><a href="pkg/math/bits.html">/bits</a><i class="importedbys"> (<a href="dep/math/bits.html#imported-by">49</a>)</i><i class="codelines"> (693)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements bit counting and manipulation functions for the predeclared unsigned integer types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/rand" data-module="" data-loc="1265" data-importedbys="4" data-depheight="9" data-depdepth="3"><code>     <span class="order">253</span>. <a href="pkg/math/rand.html" class="path-duplicate">math</a><a href="pkg/math/rand.html">/rand</a><i class="importedbys"> (<a href="dep/math/rand.html#imported-by">4</a>)</i><i class="codelines"> (1265)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/rand/v2" data-module="" data-loc="1046" data-importedbys="2" data-depheight="8" data-depdepth="5"><code>     <span class="order">254</span>. <a href="pkg/math/rand/v2.html" class="path-duplicate">math/rand</a><a href="pkg/math/rand/v2.html">/v2</a><i class="importedbys"> (<a href="dep/math/rand/v2.html#imported-by">2</a>)</i><i class="codelines"> (1046)</i><i class="depheight"> (8)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime" data-module="" data-loc="1295" data-importedbys="2" data-depheight="15" data-depdepth="4"><code>     <span class="order">255</span>. <a href="pkg/mime.html">mime</a><i class="importedbys"> (<a href="dep/mime.html#imported-by">2</a>)</i><i class="codelines"> (1295)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements parts of the MIME spec.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime/multipart" data-module="" data-loc="1022" data-importedbys="1" data-depheight="21" data-depdepth="4"><code>     <span class="order">256</span>. <a href="pkg/mime/multipart.html" class="path-duplicate">mime</a><a href="pkg/mime/multipart.html">/multipart</a><i class="importedbys"> (<a href="dep/mime/multipart.html#imported-by">1</a>)</i><i class="codelines"> (1022)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements MIME multipart parsing, as defined in RFC 2046.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime/quotedprintable" data-module="" data-loc="312" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">257</span>. <a href="pkg/mime/quotedprintable.html" class="path-duplicate">mime</a><a href="pkg/mime/quotedprintable.html">/quotedprintable</a><i class="importedbys"> (<a href="dep/mime/quotedprintable.html#imported-by">1</a>)</i><i class="codelines"> (312)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements quoted-printable encoding as specified by RFC 2045.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net" data-module="" data-loc="12982" data-importedbys="19" data-depheight="14" data-depdepth="3"><code>     <span class="order">258</span>. <a href="pkg/net.html">net</a><i class="importedbys"> (<a href="dep/net.html#imported-by">19</a>)</i><i class="codelines"> (12982)</i><i class="depheight"> (14)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http" data-module="" data-loc="29689" data-importedbys="4" data-depheight="26" data-depdepth="3"><code>     <span class="order">259</span>. <a href="pkg/net/http.html" class="path-duplicate">net</a><a href="pkg/net/http.html">/http</a><i class="importedbys"> (<a href="dep/net/http.html#imported-by">4</a>)</i><i class="codelines"> (29689)</i><i class="depheight"> (26)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides HTTP client and server implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/httptrace" data-module="" data-loc="255" data-importedbys="2" data-depheight="24" data-depdepth="4"><code>     <span class="order">260</span>. <a href="pkg/net/http/httptrace.html" class="path-duplicate">net/http</a><a href="pkg/net/http/httptrace.html">/httptrace</a><i class="importedbys"> (<a href="dep/net/http/httptrace.html#imported-by">2</a>)</i><i class="codelines"> (255)</i><i class="depheight"> (24)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides mechanisms to trace the events within HTTP client requests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal" data-module="" data-loc="300" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">261</span>. <a href="pkg/net/http/internal.html" class="path-duplicate">net/http</a><a href="pkg/net/http/internal.html">/internal</a><i class="importedbys"> (<a href="dep/net/http/internal.html#imported-by">1</a>)</i><i class="codelines"> (300)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains HTTP internals shared by net/http and net/http/httputil.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal/ascii" data-module="" data-loc="61" data-importedbys="1" data-depheight="10" data-depdepth="4"><code>     <span class="order">262</span>. <a href="pkg/net/http/internal/ascii.html" class="path-duplicate">net/http/internal</a><a href="pkg/net/http/internal/ascii.html">/ascii</a><i class="importedbys"> (<a href="dep/net/http/internal/ascii.html#imported-by">1</a>)</i><i class="codelines"> (61)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal/httpcommon" data-module="" data-loc="618" data-importedbys="1" data-depheight="25" data-depdepth="4"><code>     <span class="order">263</span>. <a href="pkg/net/http/internal/httpcommon.html" class="path-duplicate">net/http/internal</a><a href="pkg/net/http/internal/httpcommon.html">/httpcommon</a><i class="importedbys"> (<a href="dep/net/http/internal/httpcommon.html#imported-by">1</a>)</i><i class="codelines"> (618)</i><i class="depheight"> (25)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/netip" data-module="" data-loc="1677" data-importedbys="5" data-depheight="9" data-depdepth="3"><code>     <span class="order">264</span>. <a href="pkg/net/netip.html" class="path-duplicate">net</a><a href="pkg/net/netip.html">/netip</a><i class="importedbys"> (<a href="dep/net/netip.html#imported-by">5</a>)</i><i class="codelines"> (1677)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines an IP address type that's a small value type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/textproto" data-module="" data-loc="1297" data-importedbys="6" data-depheight="15" data-depdepth="4"><code>     <span class="order">265</span>. <a href="pkg/net/textproto.html" class="path-duplicate">net</a><a href="pkg/net/textproto.html">/textproto</a><i class="importedbys"> (<a href="dep/net/textproto.html#imported-by">6</a>)</i><i class="codelines"> (1297)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements generic support for text-based request/response protocols in the style of HTTP, NNTP, and SMTP.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/url" data-module="" data-loc="1434" data-importedbys="7" data-depheight="15" data-depdepth="3"><code>     <span class="order">266</span>. <a href="pkg/net/url.html" class="path-duplicate">net</a><a href="pkg/net/url.html">/url</a><i class="importedbys"> (<a href="dep/net/url.html#imported-by">7</a>)</i><i class="codelines"> (1434)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - parses URLs and implements query escaping.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-os" data-module="" data-loc="6124" data-importedbys="22" data-depheight="13" data-depdepth="2"><code>     <span class="order">267</span>. <a href="pkg/os.html">os</a><i class="importedbys"> (<a href="dep/os.html#imported-by">22</a>)</i><i class="codelines"> (6124)</i><i class="depheight"> (13)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a platform-independent interface to operating system functionality.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-path" data-module="" data-loc="444" data-importedbys="5" data-depheight="8" data-depdepth="4"><code>     <span class="order">268</span>. <a href="pkg/path.html">path</a><i class="importedbys"> (<a href="dep/path.html#imported-by">5</a>)</i><i class="codelines"> (444)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements utility routines for manipulating slash-separated paths.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-path/filepath" data-module="" data-loc="1039" data-importedbys="5" data-depheight="14" data-depdepth="2"><code>     <span class="order">269</span>. <a href="pkg/path/filepath.html" class="path-duplicate">path</a><a href="pkg/path/filepath.html">/filepath</a><i class="importedbys"> (<a href="dep/path/filepath.html#imported-by">5</a>)</i><i class="codelines"> (1039)</i><i class="depheight"> (14)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements utility routines for manipulating filename paths in a way compatible with the target operating system-defined file paths.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-reflect" data-module="" data-loc="8694" data-importedbys="15" data-depheight="9" data-depdepth="3"><code>     <span class="order">270</span>. <a href="pkg/reflect.html">reflect</a><i class="importedbys"> (<a href="dep/reflect.html#imported-by">15</a>)</i><i class="codelines"> (8694)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements run-time reflection, allowing a program to manipulate objects with arbitrary types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr" data-module="rsc.io/qr" data-loc="516" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">271</span>. <a href="pkg/rsc.io/qr.html">rsc.io/qr</a><i class="importedbys"> (<a href="dep/rsc.io/qr.html#imported-by">1</a>)</i><i class="codelines"> (516)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - encodes QR codes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr/coding" data-module="rsc.io/qr" data-loc="815" data-importedbys="1" data-depheight="15" data-depdepth="3"><code>     <span class="order">272</span>. <a href="pkg/rsc.io/qr/coding.html" class="path-duplicate">rsc.io/qr</a><a href="pkg/rsc.io/qr/coding.html">/coding</a><i class="importedbys"> (<a href="dep/rsc.io/qr/coding.html#imported-by">1</a>)</i><i class="codelines"> (815)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements low-level QR coding details.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr/gf256" data-module="rsc.io/qr" data-loc="241" data-importedbys="1" data-depheight="9" data-depdepth="4"><code>     <span class="order">273</span>. <a href="pkg/rsc.io/qr/gf256.html" class="path-duplicate">rsc.io/qr</a><a href="pkg/rsc.io/qr/gf256.html">/gf256</a><i class="importedbys"> (<a href="dep/rsc.io/qr/gf256.html#imported-by">1</a>)</i><i class="codelines"> (241)</i><i class="depheight"> (9)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements arithmetic over the Galois Field GF(256).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime" data-module="" data-loc="88411" data-importedbys="38" data-depheight="5" data-depdepth="3"><code>     <span class="order">274</span>. <a href="pkg/runtime.html">runtime</a><i class="importedbys"> (<a href="dep/runtime.html#imported-by">38</a>)</i><i class="codelines"> (88411)</i><i class="depheight"> (5)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains operations that interact with Go's runtime system, such as functions to control goroutines.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime/cgo" data-module="" data-loc="593" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">275</span>. <a href="pkg/runtime/cgo.html" class="path-duplicate">runtime</a><a href="pkg/runtime/cgo.html">/cgo</a><i class="importedbys"> (<a href="dep/runtime/cgo.html#imported-by">1</a>)</i><i class="codelines"> (593)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains runtime support for code generated by the cgo tool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime/debug" data-module="" data-loc="644" data-importedbys="3" data-depheight="15" data-depdepth="3"><code>     <span class="order">276</span>. <a href="pkg/runtime/debug.html" class="path-duplicate">runtime</a><a href="pkg/runtime/debug.html">/debug</a><i class="importedbys"> (<a href="dep/runtime/debug.html#imported-by">3</a>)</i><i class="codelines"> (644)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains facilities for programs to debug themselves while they are running.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-slices" data-module="" data-loc="1799" data-importedbys="32" data-depheight="7" data-depdepth="3"><code>     <span class="order">277</span>. <a href="pkg/slices.html">slices</a><i class="importedbys"> (<a href="dep/slices.html#imported-by">32</a>)</i><i class="codelines"> (1799)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines various functions useful with slices of any type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sort" data-module="" data-loc="1404" data-importedbys="15" data-depheight="8" data-depdepth="3"><code>     <span class="order">278</span>. <a href="pkg/sort.html">sort</a><i class="importedbys"> (<a href="dep/sort.html#imported-by">15</a>)</i><i class="codelines"> (1404)</i><i class="depheight"> (8)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides primitives for sorting slices and user-defined collections.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-strconv" data-module="" data-loc="1689" data-importedbys="51" data-depheight="8" data-depdepth="2"><code>     <span class="order">279</span>. <a href="pkg/strconv.html">strconv</a><i class="importedbys"> (<a href="dep/strconv.html#imported-by">51</a>)</i><i class="codelines"> (1689)</i><i class="depheight"> (8)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements conversions to and from string representations of basic data types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-strings" data-module="" data-loc="2435" data-importedbys="43" data-depheight="9" data-depdepth="2"><code>     <span class="order">280</span>. <a href="pkg/strings.html">strings</a><i class="importedbys"> (<a href="dep/strings.html#imported-by">43</a>)</i><i class="codelines"> (2435)</i><i class="depheight"> (9)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements simple functions to manipulate UTF-8 encoded strings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sync" data-module="" data-loc="1697" data-importedbys="77" data-depheight="6" data-depdepth="2"><code>     <span class="order">281</span>. <a href="pkg/sync.html">sync</a><i class="importedbys"> (<a href="dep/sync.html#imported-by">77</a>)</i><i class="codelines"> (1697)</i><i class="depheight"> (6)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides basic synchronization primitives such as mutual exclusion locks.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sync/atomic" data-module="" data-loc="768" data-importedbys="38" data-depheight="2" data-depdepth="2"><code>     <span class="order">282</span>. <a href="pkg/sync/atomic.html" class="path-duplicate">sync</a><a href="pkg/sync/atomic.html">/atomic</a><i class="importedbys"> (<a href="dep/sync/atomic.html#imported-by">38</a>)</i><i class="codelines"> (768)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides low-level atomic memory primitives useful for implementing synchronization algorithms.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-syscall" data-module="" data-loc="8451" data-importedbys="9" data-depheight="9" data-depdepth="3"><code>     <span class="order">283</span>. <a href="pkg/syscall.html">syscall</a><i class="importedbys"> (<a href="dep/syscall.html#imported-by">9</a>)</i><i class="codelines"> (8451)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains an interface to the low-level operating system primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-time" data-module="" data-loc="5623" data-importedbys="46" data-depheight="10" data-depdepth="2"><code>     <span class="order">284</span>. <a href="pkg/time.html">time</a><i class="importedbys"> (<a href="dep/time.html#imported-by">46</a>)</i><i class="codelines"> (5623)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides functionality for measuring and displaying time.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode" data-module="" data-loc="10330" data-importedbys="8" data-depheight="1" data-depdepth="3"><code>     <span class="order">285</span>. <a href="pkg/unicode.html">unicode</a><i class="importedbys"> (<a href="dep/unicode.html#imported-by">8</a>)</i><i class="codelines"> (10330)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides data and functions to test some properties of Unicode code points.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode/utf16" data-module="" data-loc="144" data-importedbys="4" data-depheight="1" data-depdepth="3"><code>     <span class="order">286</span>. <a href="pkg/unicode/utf16.html" class="path-duplicate">unicode</a><a href="pkg/unicode/utf16.html">/utf16</a><i class="importedbys"> (<a href="dep/unicode/utf16.html#imported-by">4</a>)</i><i class="codelines"> (144)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements encoding and decoding of UTF-16 sequences.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode/utf8" data-module="" data-loc="578" data-importedbys="25" data-depheight="1" data-depdepth="3"><code>     <span class="order">287</span>. <a href="pkg/unicode/utf8.html" class="path-duplicate">unicode</a><a href="pkg/unicode/utf8.html">/utf8</a><i class="importedbys"> (<a href="dep/unicode/utf8.html#imported-by">25</a>)</i><i class="codelines"> (578)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions and constants to support text encoded in UTF-8.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unique" data-module="" data-loc="552" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">288</span>. <a href="pkg/unique.html">unique</a><i class="importedbys"> (<a href="dep/unique.html#imported-by">1</a>)</i><i class="codelines"> (552)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - The unique package provides facilities for canonicalizing ("interning") comparable values.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unsafe" data-module="" data-loc="271" data-importedbys="81" data-depheight="1" data-depdepth="3"><code>     <span class="order">289</span>. <a href="pkg/unsafe.html">unsafe</a><i class="importedbys"> (<a href="dep/unsafe.html#imported-by">81</a>)</i><i class="codelines"> (271)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains operations that step around the type safety of Go programs.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/chacha20" data-module="" data-loc="453" data-importedbys="1" data-depheight="18" data-depdepth="6"><code>     <span class="order">290</span>. <a href="pkg/vendor/golang.org/x/crypto/chacha20.html">vendor/golang.org/x/crypto/chacha20</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/chacha20.html#imported-by">1</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (18)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/chacha20poly1305" data-module="" data-loc="380" data-importedbys="2" data-depheight="19" data-depdepth="5"><code>     <span class="order">291</span>. <a href="pkg/vendor/golang.org/x/crypto/chacha20poly1305.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/chacha20poly1305.html">/chacha20poly1305</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/chacha20poly1305.html#imported-by">2</a>)</i><i class="codelines"> (380)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/cryptobyte" data-module="" data-loc="1358" data-importedbys="3" data-depheight="17" data-depdepth="4"><code>     <span class="order">292</span>. <a href="pkg/vendor/golang.org/x/crypto/cryptobyte.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/cryptobyte.html">/cryptobyte</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/cryptobyte.html#imported-by">3</a>)</i><i class="codelines"> (1358)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/cryptobyte/asn1" data-module="" data-loc="46" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">293</span>. <a href="pkg/vendor/golang.org/x/crypto/cryptobyte/asn1.html" class="path-duplicate">vendor/golang.org/x/crypto/cryptobyte</a><a href="pkg/vendor/golang.org/x/crypto/cryptobyte/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/cryptobyte/asn1.html#imported-by">3</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/internal/alias" data-module="" data-loc="31" data-importedbys="2" data-depheight="2" data-depdepth="6"><code>     <span class="order">294</span>. <a href="pkg/vendor/golang.org/x/crypto/internal/alias.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/internal/alias.html">/internal/alias</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/internal/alias.html#imported-by">2</a>)</i><i class="codelines"> (31)</i><i class="depheight"> (2)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/internal/poly1305" data-module="" data-loc="458" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">295</span>. <a href="pkg/vendor/golang.org/x/crypto/internal/poly1305.html" class="path-duplicate">vendor/golang.org/x/crypto/internal</a><a href="pkg/vendor/golang.org/x/crypto/internal/poly1305.html">/poly1305</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/internal/poly1305.html#imported-by">1</a>)</i><i class="codelines"> (458)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements Poly1305 one-time message authentication code as specified in https://cr.yp.to/mac/poly1305-20050329.pdf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/dns/dnsmessage" data-module="" data-loc="3070" data-importedbys="1" data-depheight="8" data-depdepth="4"><code>     <span class="order">296</span>. <a href="pkg/vendor/golang.org/x/net/dns/dnsmessage.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/net/dns/dnsmessage.html">/net/dns/dnsmessage</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/dns/dnsmessage.html#imported-by">1</a>)</i><i class="codelines"> (3070)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a mostly RFC 1035 compliant implementation of DNS message packing and unpacking.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http/httpguts" data-module="" data-loc="397" data-importedbys="2" data-depheight="19" data-depdepth="4"><code>     <span class="order">297</span>. <a href="pkg/vendor/golang.org/x/net/http/httpguts.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/http/httpguts.html">/http/httpguts</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http/httpguts.html#imported-by">2</a>)</i><i class="codelines"> (397)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides functions implementing various details of the HTTP specification.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http/httpproxy" data-module="" data-loc="373" data-importedbys="1" data-depheight="19" data-depdepth="4"><code>     <span class="order">298</span>. <a href="pkg/vendor/golang.org/x/net/http/httpproxy.html" class="path-duplicate">vendor/golang.org/x/net/http</a><a href="pkg/vendor/golang.org/x/net/http/httpproxy.html">/httpproxy</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http/httpproxy.html#imported-by">1</a>)</i><i class="codelines"> (373)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides support for HTTP proxy determination based on environment variables, as provided by net/http's ProxyFromEnvironment function.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http2/hpack" data-module="" data-loc="1585" data-importedbys="2" data-depheight="15" data-depdepth="4"><code>     <span class="order">299</span>. <a href="pkg/vendor/golang.org/x/net/http2/hpack.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/http2/hpack.html">/http2/hpack</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http2/hpack.html#imported-by">2</a>)</i><i class="codelines"> (1585)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements HPACK, a compression format for efficiently representing HTTP header fields in the context of HTTP/2.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/idna" data-module="" data-loc="6354" data-importedbys="3" data-depheight="18" data-depdepth="4"><code>     <span class="order">300</span>. <a href="pkg/vendor/golang.org/x/net/idna.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/idna.html">/idna</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/idna.html#imported-by">3</a>)</i><i class="codelines"> (6354)</i><i class="depheight"> (18)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements IDNA2008 using the compatibility processing defined by UTS (Unicode Technical Standard) #46, which defines a standard to deal with the transition from IDNA2003.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/sys/cpu" data-module="" data-loc="759" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order">301</span>. <a href="pkg/vendor/golang.org/x/sys/cpu.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/sys/cpu.html">/sys/cpu</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/sys/cpu.html#imported-by">1</a>)</i><i class="codelines"> (759)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements processor feature detection for various CPU architectures.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/secure/bidirule" data-module="" data-loc="347" data-importedbys="1" data-depheight="17" data-depdepth="5"><code>     <span class="order">302</span>. <a href="pkg/vendor/golang.org/x/text/secure/bidirule.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/text/secure/bidirule.html">/text/secure/bidirule</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/secure/bidirule.html#imported-by">1</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the Bidi Rule defined by RFC 5893.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/transform" data-module="" data-loc="709" data-importedbys="2" data-depheight="10" data-depdepth="6"><code>     <span class="order">303</span>. <a href="pkg/vendor/golang.org/x/text/transform.html" class="path-duplicate">vendor/golang.org/x/text</a><a href="pkg/vendor/golang.org/x/text/transform.html">/transform</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/transform.html#imported-by">2</a>)</i><i class="codelines"> (709)</i><i class="depheight"> (10)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - provides reader and writer wrappers that transform the bytes passing through as well as various transformations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/unicode/bidi" data-module="" data-loc="4052" data-importedbys="2" data-depheight="16" data-depdepth="5"><code>     <span class="order">304</span>. <a href="pkg/vendor/golang.org/x/text/unicode/bidi.html" class="path-duplicate">vendor/golang.org/x/text</a><a href="pkg/vendor/golang.org/x/text/unicode/bidi.html">/unicode/bidi</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/unicode/bidi.html#imported-by">2</a>)</i><i class="codelines"> (4052)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains functionality for bidirectional text support.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/unicode/norm" data-module="" data-loc="10141" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">305</span>. <a href="pkg/vendor/golang.org/x/text/unicode/norm.html" class="path-duplicate">vendor/golang.org/x/text/unicode</a><a href="pkg/vendor/golang.org/x/text/unicode/norm.html">/norm</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/unicode/norm.html#imported-by">1</a>)</i><i class="codelines"> (10141)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains types and functions for normalizing Unicode strings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-weak" data-module="" data-loc="107" data-importedbys="4" data-depheight="6" data-depdepth="5"><code>     <span class="order">306</span>. <a href="pkg/weak.html">weak</a><i class="importedbys"> (<a href="dep/weak.html#imported-by">4</a>)</i><i class="codelines"> (107)</i><i class="depheight"> (6)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides ways to safely reference memory weakly, that is, without preventing its reclamation.</span></code></div></div></code></pre><pre id="footer">
+</pre><pre><code><span class="title">All Packages<span id="buttons1" class="js-on title-stat"> (<span class="buttons-content">sort packages by: <label id="btn-alphabet" class="button">alphabet</label><span id="importedbys"> | <label id="btn-importedbys" class="button">imported-by count</label></span><span id="codelines"> | <label id="btn-codelines" class="button">lines of code</label></span><span id="depdepth"> | <label id="btn-depdepth" class="button">dependency distance</label></span></span>)</span></span><input type='checkbox' id="toggle-summary"><div id="packages"><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-bufio" data-module="" data-loc="1269" data-importedbys="14" data-depheight="10" data-depdepth="4"><code>     <span class="order">  1</span>. <a href="pkg/bufio.html">bufio</a><i class="importedbys"> (<a href="dep/bufio.html#imported-by">14</a>)</i><i class="codelines"> (1269)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements buffered I/O. It wraps an io.Reader or io.Writer object, creating another object (Reader or Writer) that also implements the interface but provides buffering and some help for textual I/O.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-builtin" data-module="" data-loc="319" data-importedbys="305" data-depheight="2" data-depdepth="2"><code>     <span class="order">  2</span>. <a href="pkg/builtin.html">builtin</a><i class="importedbys"> (305)</i><i class="codelines"> (319)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-bytes" data-module="" data-loc="2211" data-importedbys="55" data-depheight="9" data-depdepth="3"><code>     <span class="order">  3</span>. <a href="pkg/bytes.html">bytes</a><i class="importedbys"> (<a href="dep/bytes.html#imported-by">55</a>)</i><i class="codelines"> (2211)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions for the manipulation of byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-cmp" data-module="" data-loc="77" data-importedbys="8" data-depheight="1" data-depdepth="2"><code>     <span class="order">  4</span>. <a href="pkg/cmp.html">cmp</a><i class="importedbys"> (<a href="dep/cmp.html#imported-by">8</a>)</i><i class="codelines"> (77)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides types and functions related to comparing ordered values.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/flate" data-module="" data-loc="3205" data-importedbys="5" data-depheight="15" data-depdepth="4"><code>     <span class="order">  5</span>. <a href="pkg/compress/flate.html">compress/flate</a><i class="importedbys"> (<a href="dep/compress/flate.html#imported-by">5</a>)</i><i class="codelines"> (3205)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the DEFLATE compressed data format, described in RFC 1951.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/gzip" data-module="" data-loc="540" data-importedbys="2" data-depheight="16" data-depdepth="4"><code>     <span class="order">  6</span>. <a href="pkg/compress/gzip.html" class="path-duplicate">compress</a><a href="pkg/compress/gzip.html">/gzip</a><i class="importedbys"> (<a href="dep/compress/gzip.html#imported-by">2</a>)</i><i class="codelines"> (540)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements reading and writing of gzip format compressed files, as specified in RFC 1952.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-compress/zlib" data-module="" data-loc="374" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order">  7</span>. <a href="pkg/compress/zlib.html" class="path-duplicate">compress</a><a href="pkg/compress/zlib.html">/zlib</a><i class="importedbys"> (<a href="dep/compress/zlib.html#imported-by">1</a>)</i><i class="codelines"> (374)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements reading and writing of zlib format compressed data, as specified in RFC 1950.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-container/list" data-module="" data-loc="235" data-importedbys="4" data-depheight="1" data-depdepth="4"><code>     <span class="order">  8</span>. <a href="pkg/container/list.html">container/list</a><i class="importedbys"> (<a href="dep/container/list.html#imported-by">4</a>)</i><i class="codelines"> (235)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a doubly linked list.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-context" data-module="" data-loc="806" data-importedbys="31" data-depheight="11" data-depdepth="2"><code>     <span class="order">  9</span>. <a href="pkg/context.html">context</a><i class="importedbys"> (<a href="dep/context.html#imported-by">31</a>)</i><i class="codelines"> (806)</i><i class="depheight"> (11)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - defines the Context type, which carries deadlines, cancellation signals, and other request-scoped values across API boundaries and between processes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto" data-module="" data-loc="273" data-importedbys="16" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 10</span>. <a href="pkg/crypto.html">crypto</a><i class="importedbys"> (<a href="dep/crypto.html#imported-by">16</a>)</i><i class="codelines"> (273)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - collects common cryptographic constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/aes" data-module="" data-loc="48" data-importedbys="10" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 11</span>. <a href="pkg/crypto/aes.html" class="path-duplicate">crypto</a><a href="pkg/crypto/aes.html">/aes</a><i class="importedbys"> (<a href="dep/crypto/aes.html#imported-by">10</a>)</i><i class="codelines"> (48)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/cipher" data-module="" data-loc="1040" data-importedbys="17" data-depheight="17" data-depdepth="3"><code>     <span class="order"> 12</span>. <a href="pkg/crypto/cipher.html" class="path-duplicate">crypto</a><a href="pkg/crypto/cipher.html">/cipher</a><i class="importedbys"> (<a href="dep/crypto/cipher.html#imported-by">17</a>)</i><i class="codelines"> (1040)</i><i class="depheight"> (17)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements standard block cipher modes that can be wrapped around low-level block cipher implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/des" data-module="" data-loc="556" data-importedbys="3" data-depheight="18" data-depdepth="4"><code>     <span class="order"> 13</span>. <a href="pkg/crypto/des.html" class="path-duplicate">crypto</a><a href="pkg/crypto/des.html">/des</a><i class="importedbys"> (<a href="dep/crypto/des.html#imported-by">3</a>)</i><i class="codelines"> (556)</i><i class="depheight"> (18)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/dsa" data-module="" data-loc="330" data-importedbys="1" data-depheight="20" data-depdepth="4"><code>     <span class="order"> 14</span>. <a href="pkg/crypto/dsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/dsa.html">/dsa</a><i class="importedbys"> (<a href="dep/crypto/dsa.html#imported-by">1</a>)</i><i class="codelines"> (330)</i><i class="depheight"> (20)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Digital Signature Algorithm, as defined in FIPS 186-3.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ecdh" data-module="" data-loc="551" data-importedbys="6" data-depheight="20" data-depdepth="4"><code>     <span class="order"> 15</span>. <a href="pkg/crypto/ecdh.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ecdh.html">/ecdh</a><i class="importedbys"> (<a href="dep/crypto/ecdh.html#imported-by">6</a>)</i><i class="codelines"> (551)</i><i class="depheight"> (20)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ecdsa" data-module="" data-loc="868" data-importedbys="3" data-depheight="21" data-depdepth="4"><code>     <span class="order"> 16</span>. <a href="pkg/crypto/ecdsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ecdsa.html">/ecdsa</a><i class="importedbys"> (<a href="dep/crypto/ecdsa.html#imported-by">3</a>)</i><i class="codelines"> (868)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Elliptic Curve Digital Signature Algorithm, as defined in [FIPS 186-5].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/ed25519" data-module="" data-loc="257" data-importedbys="3" data-depheight="21" data-depdepth="4"><code>     <span class="order"> 17</span>. <a href="pkg/crypto/ed25519.html" class="path-duplicate">crypto</a><a href="pkg/crypto/ed25519.html">/ed25519</a><i class="importedbys"> (<a href="dep/crypto/ed25519.html#imported-by">3</a>)</i><i class="codelines"> (257)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the Ed25519 signature algorithm.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/elliptic" data-module="" data-loc="884" data-importedbys="4" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 18</span>. <a href="pkg/crypto/elliptic.html" class="path-duplicate">crypto</a><a href="pkg/crypto/elliptic.html">/elliptic</a><i class="importedbys"> (<a href="dep/crypto/elliptic.html#imported-by">4</a>)</i><i class="codelines"> (884)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the standard NIST P-224, P-256, P-384, and P-521 elliptic curves over prime fields.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/fips140" data-module="" data-loc="93" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order"> 19</span>. <a href="pkg/crypto/fips140.html" class="path-duplicate">crypto</a><a href="pkg/crypto/fips140.html">/fips140</a><i class="importedbys"> (<a href="dep/crypto/fips140.html#imported-by">6</a>)</i><i class="codelines"> (93)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides information about the FIPS 140-3 Go Cryptographic Module and FIPS 140-3 mode.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hkdf" data-module="" data-loc="84" data-importedbys="4" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 20</span>. <a href="pkg/crypto/hkdf.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/crypto/hkdf.html#imported-by">4</a>)</i><i class="codelines"> (84)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hmac" data-module="" data-loc="65" data-importedbys="5" data-depheight="19" data-depdepth="5"><code>     <span class="order"> 21</span>. <a href="pkg/crypto/hmac.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hmac.html">/hmac</a><i class="importedbys"> (<a href="dep/crypto/hmac.html#imported-by">5</a>)</i><i class="codelines"> (65)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/hpke" data-module="" data-loc="1482" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order"> 22</span>. <a href="pkg/crypto/hpke.html" class="path-duplicate">crypto</a><a href="pkg/crypto/hpke.html">/hpke</a><i class="importedbys"> (<a href="dep/crypto/hpke.html#imported-by">1</a>)</i><i class="codelines"> (1482)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements Hybrid Public Key Encryption (HPKE) as defined in [RFC 9180].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring" data-module="" data-loc="142" data-importedbys="12" data-depheight="18" data-depdepth="3"><code>     <span class="order"> 23</span>. <a href="pkg/crypto/internal/boring.html" class="path-duplicate">crypto</a><a href="pkg/crypto/internal/boring.html">/internal/boring</a><i class="importedbys"> (<a href="dep/crypto/internal/boring.html#imported-by">12</a>)</i><i class="codelines"> (142)</i><i class="depheight"> (18)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides access to BoringCrypto implementation functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring/bbig" data-module="" data-loc="33" data-importedbys="2" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 24</span>. <a href="pkg/crypto/internal/boring/bbig.html" class="path-duplicate">crypto/internal/boring</a><a href="pkg/crypto/internal/boring/bbig.html">/bbig</a><i class="importedbys"> (<a href="dep/crypto/internal/boring/bbig.html#imported-by">2</a>)</i><i class="codelines"> (33)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/boring/sig" data-module="" data-loc="17" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 25</span>. <a href="pkg/crypto/internal/boring/sig.html" class="path-duplicate">crypto/internal/boring</a><a href="pkg/crypto/internal/boring/sig.html">/sig</a><i class="importedbys"> (<a href="dep/crypto/internal/boring/sig.html#imported-by">1</a>)</i><i class="codelines"> (17)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - holds “code signatures” that can be called and will result in certain code sequences being linked into the final binary.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/constanttime" data-module="" data-loc="42" data-importedbys="5" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 26</span>. <a href="pkg/crypto/internal/constanttime.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/constanttime.html">/constanttime</a><i class="importedbys"> (<a href="dep/crypto/internal/constanttime.html#imported-by">5</a>)</i><i class="codelines"> (42)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/entropy/v1.0.0" data-module="" data-loc="430" data-importedbys="1" data-depheight="12" data-depdepth="5"><code>     <span class="order"> 27</span>. <a href="pkg/crypto/internal/entropy/v1.0.0.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/entropy/v1.0.0.html">/entropy/v1.0.0</a><i class="importedbys"> (<a href="dep/crypto/internal/entropy/v1.0.0.html#imported-by">1</a>)</i><i class="codelines"> (430)</i><i class="depheight"> (12)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements a CPU jitter-based SP 800-90B entropy source.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140" data-module="" data-loc="256" data-importedbys="18" data-depheight="10" data-depdepth="4"><code>     <span class="order"> 28</span>. <a href="pkg/crypto/internal/fips140.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140.html">/fips140</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140.html#imported-by">18</a>)</i><i class="codelines"> (256)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/aes" data-module="" data-loc="1157" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order"> 29</span>. <a href="pkg/crypto/internal/fips140/aes.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/aes.html">/aes</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/aes.html#imported-by">6</a>)</i><i class="codelines"> (1157)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/aes/gcm" data-module="" data-loc="998" data-importedbys="3" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 30</span>. <a href="pkg/crypto/internal/fips140/aes/gcm.html" class="path-duplicate">crypto/internal/fips140/aes</a><a href="pkg/crypto/internal/fips140/aes/gcm.html">/gcm</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/aes/gcm.html#imported-by">3</a>)</i><i class="codelines"> (998)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/alias" data-module="" data-loc="30" data-importedbys="6" data-depheight="2" data-depdepth="4"><code>     <span class="order"> 31</span>. <a href="pkg/crypto/internal/fips140/alias.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/alias.html">/alias</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/alias.html#imported-by">6</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/bigmod" data-module="" data-loc="1266" data-importedbys="3" data-depheight="14" data-depdepth="3"><code>     <span class="order"> 32</span>. <a href="pkg/crypto/internal/fips140/bigmod.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/bigmod.html">/bigmod</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/bigmod.html#imported-by">3</a>)</i><i class="codelines"> (1266)</i><i class="depheight"> (14)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/check" data-module="" data-loc="108" data-importedbys="18" data-depheight="13" data-depdepth="4"><code>     <span class="order"> 33</span>. <a href="pkg/crypto/internal/fips140/check.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/check.html">/check</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/check.html#imported-by">18</a>)</i><i class="codelines"> (108)</i><i class="depheight"> (13)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the FIPS 140 load-time code+data verification.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/drbg" data-module="" data-loc="358" data-importedbys="10" data-depheight="15" data-depdepth="4"><code>     <span class="order"> 34</span>. <a href="pkg/crypto/internal/fips140/drbg.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/drbg.html">/drbg</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/drbg.html#imported-by">10</a>)</i><i class="codelines"> (358)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides cryptographically secure random bytes usable by FIPS code.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ecdh" data-module="" data-loc="360" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 35</span>. <a href="pkg/crypto/internal/fips140/ecdh.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ecdh.html">/ecdh</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ecdh.html#imported-by">1</a>)</i><i class="codelines"> (360)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ecdsa" data-module="" data-loc="836" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 36</span>. <a href="pkg/crypto/internal/fips140/ecdsa.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ecdsa.html">/ecdsa</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ecdsa.html#imported-by">1</a>)</i><i class="codelines"> (836)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/ed25519" data-module="" data-loc="404" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order"> 37</span>. <a href="pkg/crypto/internal/fips140/ed25519.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/ed25519.html">/ed25519</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/ed25519.html#imported-by">1</a>)</i><i class="codelines"> (404)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/edwards25519" data-module="" data-loc="2289" data-importedbys="1" data-depheight="15" data-depdepth="6"><code>     <span class="order"> 38</span>. <a href="pkg/crypto/internal/fips140/edwards25519.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/edwards25519.html">/edwards25519</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/edwards25519.html#imported-by">1</a>)</i><i class="codelines"> (2289)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements group logic for the twisted Edwards curve</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/edwards25519/field" data-module="" data-loc="708" data-importedbys="2" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 39</span>. <a href="pkg/crypto/internal/fips140/edwards25519/field.html" class="path-duplicate">crypto/internal/fips140/edwards25519</a><a href="pkg/crypto/internal/fips140/edwards25519/field.html">/field</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/edwards25519/field.html#imported-by">2</a>)</i><i class="codelines"> (708)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements fast arithmetic modulo 2^255-19.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/hkdf" data-module="" data-loc="90" data-importedbys="2" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 40</span>. <a href="pkg/crypto/internal/fips140/hkdf.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/hkdf.html#imported-by">2</a>)</i><i class="codelines"> (90)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/hmac" data-module="" data-loc="243" data-importedbys="6" data-depheight="12" data-depdepth="5"><code>     <span class="order"> 41</span>. <a href="pkg/crypto/internal/fips140/hmac.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/hmac.html">/hmac</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/hmac.html#imported-by">6</a>)</i><i class="codelines"> (243)</i><i class="depheight"> (12)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements HMAC according to [FIPS 198-1].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/mlkem" data-module="" data-loc="1609" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order"> 42</span>. <a href="pkg/crypto/internal/fips140/mlkem.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/mlkem.html">/mlkem</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/mlkem.html#imported-by">1</a>)</i><i class="codelines"> (1609)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/nistec" data-module="" data-loc="2478" data-importedbys="4" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 43</span>. <a href="pkg/crypto/internal/fips140/nistec.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/nistec.html">/nistec</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/nistec.html#imported-by">4</a>)</i><i class="codelines"> (2478)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the elliptic curves from NIST SP 800-186.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/nistec/fiat" data-module="" data-loc="12323" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 44</span>. <a href="pkg/crypto/internal/fips140/nistec/fiat.html" class="path-duplicate">crypto/internal/fips140/nistec</a><a href="pkg/crypto/internal/fips140/nistec/fiat.html">/fiat</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/nistec/fiat.html#imported-by">1</a>)</i><i class="codelines"> (12323)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/pbkdf2" data-module="" data-loc="131" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order"> 45</span>. <a href="pkg/crypto/internal/fips140/pbkdf2.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/pbkdf2.html#imported-by">1</a>)</i><i class="codelines"> (131)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/rsa" data-module="" data-loc="1714" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order"> 46</span>. <a href="pkg/crypto/internal/fips140/rsa.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/rsa.html">/rsa</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/rsa.html#imported-by">1</a>)</i><i class="codelines"> (1714)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha256" data-module="" data-loc="440" data-importedbys="10" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 47</span>. <a href="pkg/crypto/internal/fips140/sha256.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha256.html">/sha256</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha256.html#imported-by">10</a>)</i><i class="codelines"> (440)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-224 and SHA-256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha3" data-module="" data-loc="933" data-importedbys="6" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 48</span>. <a href="pkg/crypto/internal/fips140/sha3.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha3.html#imported-by">6</a>)</i><i class="codelines"> (933)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-3 fixed-output-length hash functions and the SHAKE variable-output-length functions defined by [FIPS 202], as well as the cSHAKE extendable-output-length functions defined by [SP 800-185].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/sha512" data-module="" data-loc="515" data-importedbys="7" data-depheight="11" data-depdepth="4"><code>     <span class="order"> 49</span>. <a href="pkg/crypto/internal/fips140/sha512.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/sha512.html">/sha512</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/sha512.html#imported-by">7</a>)</i><i class="codelines"> (515)</i><i class="depheight"> (11)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/subtle" data-module="" data-loc="115" data-importedbys="9" data-depheight="3" data-depdepth="4"><code>     <span class="order"> 50</span>. <a href="pkg/crypto/internal/fips140/subtle.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/subtle.html">/subtle</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/subtle.html#imported-by">9</a>)</i><i class="codelines"> (115)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/tls12" data-module="" data-loc="108" data-importedbys="1" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 51</span>. <a href="pkg/crypto/internal/fips140/tls12.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/tls12.html">/tls12</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/tls12.html#imported-by">1</a>)</i><i class="codelines"> (108)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140/tls13" data-module="" data-loc="215" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 52</span>. <a href="pkg/crypto/internal/fips140/tls13.html" class="path-duplicate">crypto/internal/fips140</a><a href="pkg/crypto/internal/fips140/tls13.html">/tls13</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140/tls13.html#imported-by">1</a>)</i><i class="codelines"> (215)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140cache" data-module="" data-loc="52" data-importedbys="2" data-depheight="7" data-depdepth="5"><code>     <span class="order"> 53</span>. <a href="pkg/crypto/internal/fips140cache.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140cache.html">/fips140cache</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140cache.html#imported-by">2</a>)</i><i class="codelines"> (52)</i><i class="depheight"> (7)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides a weak map that associates the lifetime of values with the lifetime of keys.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/byteorder" data-module="" data-loc="55" data-importedbys="15" data-depheight="2" data-depdepth="4"><code>     <span class="order"> 54</span>. <a href="pkg/crypto/internal/fips140deps/byteorder.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140deps/byteorder.html">/fips140deps/byteorder</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/byteorder.html#imported-by">15</a>)</i><i class="codelines"> (55)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/cpu" data-module="" data-loc="49" data-importedbys="6" data-depheight="3" data-depdepth="4"><code>     <span class="order"> 55</span>. <a href="pkg/crypto/internal/fips140deps/cpu.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/cpu.html#imported-by">6</a>)</i><i class="codelines"> (49)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/godebug" data-module="" data-loc="23" data-importedbys="3" data-depheight="9" data-depdepth="5"><code>     <span class="order"> 56</span>. <a href="pkg/crypto/internal/fips140deps/godebug.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/godebug.html">/godebug</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/godebug.html#imported-by">3</a>)</i><i class="codelines"> (23)</i><i class="depheight"> (9)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140deps/time" data-module="" data-loc="21" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order"> 57</span>. <a href="pkg/crypto/internal/fips140deps/time.html" class="path-duplicate">crypto/internal/fips140deps</a><a href="pkg/crypto/internal/fips140deps/time.html">/time</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140deps/time.html#imported-by">1</a>)</i><i class="codelines"> (21)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140hash" data-module="" data-loc="34" data-importedbys="5" data-depheight="13" data-depdepth="3"><code>     <span class="order"> 58</span>. <a href="pkg/crypto/internal/fips140hash.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140hash.html">/fips140hash</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140hash.html#imported-by">5</a>)</i><i class="codelines"> (34)</i><i class="depheight"> (13)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/fips140only" data-module="" data-loc="35" data-importedbys="14" data-depheight="16" data-depdepth="3"><code>     <span class="order"> 59</span>. <a href="pkg/crypto/internal/fips140only.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/fips140only.html">/fips140only</a><i class="importedbys"> (<a href="dep/crypto/internal/fips140only.html#imported-by">14</a>)</i><i class="codelines"> (35)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/impl" data-module="" data-loc="107" data-importedbys="6" data-depheight="10" data-depdepth="4"><code>     <span class="order"> 60</span>. <a href="pkg/crypto/internal/impl.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/impl.html">/impl</a><i class="importedbys"> (<a href="dep/crypto/internal/impl.html#imported-by">6</a>)</i><i class="codelines"> (107)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - is a registry of alternative implementations of cryptographic primitives, to allow selecting them for testing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/rand" data-module="" data-loc="89" data-importedbys="7" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 61</span>. <a href="pkg/crypto/internal/rand.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/rand.html">/rand</a><i class="importedbys"> (<a href="dep/crypto/internal/rand.html#imported-by">7</a>)</i><i class="codelines"> (89)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/randutil" data-module="" data-loc="26" data-importedbys="1" data-depheight="9" data-depdepth="4"><code>     <span class="order"> 62</span>. <a href="pkg/crypto/internal/randutil.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/randutil.html">/randutil</a><i class="importedbys"> (<a href="dep/crypto/internal/randutil.html#imported-by">1</a>)</i><i class="codelines"> (26)</i><i class="depheight"> (9)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains internal randomness utilities for various crypto packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/internal/sysrand" data-module="" data-loc="144" data-importedbys="1" data-depheight="14" data-depdepth="5"><code>     <span class="order"> 63</span>. <a href="pkg/crypto/internal/sysrand.html" class="path-duplicate">crypto/internal</a><a href="pkg/crypto/internal/sysrand.html">/sysrand</a><i class="importedbys"> (<a href="dep/crypto/internal/sysrand.html#imported-by">1</a>)</i><i class="codelines"> (144)</i><i class="depheight"> (14)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - rand provides cryptographically secure random bytes from the operating system.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/md5" data-module="" data-loc="347" data-importedbys="4" data-depheight="17" data-depdepth="4"><code>     <span class="order"> 64</span>. <a href="pkg/crypto/md5.html" class="path-duplicate">crypto</a><a href="pkg/crypto/md5.html">/md5</a><i class="importedbys"> (<a href="dep/crypto/md5.html#imported-by">4</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the MD5 hash algorithm as defined in RFC 1321.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/mlkem" data-module="" data-loc="221" data-importedbys="3" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 65</span>. <a href="pkg/crypto/mlkem.html" class="path-duplicate">crypto</a><a href="pkg/crypto/mlkem.html">/mlkem</a><i class="importedbys"> (<a href="dep/crypto/mlkem.html#imported-by">3</a>)</i><i class="codelines"> (221)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/pbkdf2" data-module="" data-loc="54" data-importedbys="1" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 66</span>. <a href="pkg/crypto/pbkdf2.html" class="path-duplicate">crypto</a><a href="pkg/crypto/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/crypto/pbkdf2.html#imported-by">1</a>)</i><i class="codelines"> (54)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rand" data-module="" data-loc="198" data-importedbys="11" data-depheight="20" data-depdepth="3"><code>     <span class="order"> 67</span>. <a href="pkg/crypto/rand.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rand.html">/rand</a><i class="importedbys"> (<a href="dep/crypto/rand.html#imported-by">11</a>)</i><i class="codelines"> (198)</i><i class="depheight"> (20)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a cryptographically secure random number generator.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rc4" data-module="" data-loc="83" data-importedbys="2" data-depheight="17" data-depdepth="5"><code>     <span class="order"> 68</span>. <a href="pkg/crypto/rc4.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rc4.html">/rc4</a><i class="importedbys"> (<a href="dep/crypto/rc4.html#imported-by">2</a>)</i><i class="codelines"> (83)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/rsa" data-module="" data-loc="1441" data-importedbys="7" data-depheight="21" data-depdepth="2"><code>     <span class="order"> 69</span>. <a href="pkg/crypto/rsa.html" class="path-duplicate">crypto</a><a href="pkg/crypto/rsa.html">/rsa</a><i class="importedbys"> (<a href="dep/crypto/rsa.html#imported-by">7</a>)</i><i class="codelines"> (1441)</i><i class="depheight"> (21)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements RSA encryption as specified in PKCS #1 and RFC 8017.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha1" data-module="" data-loc="413" data-importedbys="6" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 70</span>. <a href="pkg/crypto/sha1.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha1.html">/sha1</a><i class="importedbys"> (<a href="dep/crypto/sha1.html#imported-by">6</a>)</i><i class="codelines"> (413)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the SHA-1 hash algorithm as defined in RFC 3174.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha256" data-module="" data-loc="74" data-importedbys="8" data-depheight="19" data-depdepth="3"><code>     <span class="order"> 71</span>. <a href="pkg/crypto/sha256.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha256.html">/sha256</a><i class="importedbys"> (<a href="dep/crypto/sha256.html#imported-by">8</a>)</i><i class="codelines"> (74)</i><i class="depheight"> (19)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha3" data-module="" data-loc="274" data-importedbys="3" data-depheight="12" data-depdepth="4"><code>     <span class="order"> 72</span>. <a href="pkg/crypto/sha3.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/crypto/sha3.html#imported-by">3</a>)</i><i class="codelines"> (274)</i><i class="depheight"> (12)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/sha512" data-module="" data-loc="123" data-importedbys="7" data-depheight="19" data-depdepth="4"><code>     <span class="order"> 73</span>. <a href="pkg/crypto/sha512.html" class="path-duplicate">crypto</a><a href="pkg/crypto/sha512.html">/sha512</a><i class="importedbys"> (<a href="dep/crypto/sha512.html#imported-by">7</a>)</i><i class="codelines"> (123)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/subtle" data-module="" data-loc="134" data-importedbys="11" data-depheight="4" data-depdepth="3"><code>     <span class="order"> 74</span>. <a href="pkg/crypto/subtle.html" class="path-duplicate">crypto</a><a href="pkg/crypto/subtle.html">/subtle</a><i class="importedbys"> (<a href="dep/crypto/subtle.html#imported-by">11</a>)</i><i class="codelines"> (134)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions that are often useful in cryptographic code but require careful thought to use correctly.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/tls" data-module="" data-loc="14445" data-importedbys="2" data-depheight="23" data-depdepth="4"><code>     <span class="order"> 75</span>. <a href="pkg/crypto/tls.html" class="path-duplicate">crypto</a><a href="pkg/crypto/tls.html">/tls</a><i class="importedbys"> (<a href="dep/crypto/tls.html#imported-by">2</a>)</i><i class="codelines"> (14445)</i><i class="depheight"> (23)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/tls/internal/fips140tls" data-module="" data-loc="37" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order"> 76</span>. <a href="pkg/crypto/tls/internal/fips140tls.html" class="path-duplicate">crypto/tls</a><a href="pkg/crypto/tls/internal/fips140tls.html">/internal/fips140tls</a><i class="importedbys"> (<a href="dep/crypto/tls/internal/fips140tls.html#imported-by">1</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - controls whether crypto/tls requires FIPS-approved settings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/x509" data-module="" data-loc="7799" data-importedbys="3" data-depheight="22" data-depdepth="3"><code>     <span class="order"> 77</span>. <a href="pkg/crypto/x509.html" class="path-duplicate">crypto</a><a href="pkg/crypto/x509.html">/x509</a><i class="importedbys"> (<a href="dep/crypto/x509.html#imported-by">3</a>)</i><i class="codelines"> (7799)</i><i class="depheight"> (22)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of the X.509 standard.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-crypto/x509/pkix" data-module="" data-loc="320" data-importedbys="1" data-depheight="17" data-depdepth="4"><code>     <span class="order"> 78</span>. <a href="pkg/crypto/x509/pkix.html" class="path-duplicate">crypto/x509</a><a href="pkg/crypto/x509/pkix.html">/pkix</a><i class="importedbys"> (<a href="dep/crypto/x509/pkix.html#imported-by">1</a>)</i><i class="codelines"> (320)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-embed" data-module="" data-loc="436" data-importedbys="1" data-depheight="12" data-depdepth="3"><code>     <span class="order"> 79</span>. <a href="pkg/embed.html">embed</a><i class="importedbys"> (<a href="dep/embed.html#imported-by">1</a>)</i><i class="codelines"> (436)</i><i class="depheight"> (12)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides access to files embedded in the running Go program.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding" data-module="" data-loc="78" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order"> 80</span>. <a href="pkg/encoding.html">encoding</a><i class="importedbys"> (<a href="dep/encoding.html#imported-by">1</a>)</i><i class="codelines"> (78)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines interfaces shared by other packages that convert data to and from byte-level and textual representations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/asn1" data-module="" data-loc="2116" data-importedbys="4" data-depheight="16" data-depdepth="4"><code>     <span class="order"> 81</span>. <a href="pkg/encoding/asn1.html" class="path-duplicate">encoding</a><a href="pkg/encoding/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/encoding/asn1.html#imported-by">4</a>)</i><i class="codelines"> (2116)</i><i class="depheight"> (16)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements parsing of DER-encoded ASN.1 data structures, as defined in ITU-T Rec X.690.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/base64" data-module="" data-loc="665" data-importedbys="14" data-depheight="9" data-depdepth="3"><code>     <span class="order"> 82</span>. <a href="pkg/encoding/base64.html" class="path-duplicate">encoding</a><a href="pkg/encoding/base64.html">/base64</a><i class="importedbys"> (<a href="dep/encoding/base64.html#imported-by">14</a>)</i><i class="codelines"> (665)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements base64 encoding as specified by RFC 4648.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/binary" data-module="" data-loc="1214" data-importedbys="33" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 83</span>. <a href="pkg/encoding/binary.html" class="path-duplicate">encoding</a><a href="pkg/encoding/binary.html">/binary</a><i class="importedbys"> (<a href="dep/encoding/binary.html#imported-by">33</a>)</i><i class="codelines"> (1214)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements simple translation between numbers and byte sequences and encoding and decoding of varints.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/hex" data-module="" data-loc="353" data-importedbys="9" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 84</span>. <a href="pkg/encoding/hex.html" class="path-duplicate">encoding</a><a href="pkg/encoding/hex.html">/hex</a><i class="importedbys"> (<a href="dep/encoding/hex.html#imported-by">9</a>)</i><i class="codelines"> (353)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements hexadecimal encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/json" data-module="" data-loc="4266" data-importedbys="8" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 85</span>. <a href="pkg/encoding/json.html" class="path-duplicate">encoding</a><a href="pkg/encoding/json.html">/json</a><i class="importedbys"> (<a href="dep/encoding/json.html#imported-by">8</a>)</i><i class="codelines"> (4266)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements encoding and decoding of JSON as defined in RFC 7159.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-encoding/pem" data-module="" data-loc="331" data-importedbys="5" data-depheight="10" data-depdepth="2"><code>     <span class="order"> 86</span>. <a href="pkg/encoding/pem.html" class="path-duplicate">encoding</a><a href="pkg/encoding/pem.html">/pem</a><i class="importedbys"> (<a href="dep/encoding/pem.html#imported-by">5</a>)</i><i class="codelines"> (331)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements the PEM data encoding, which originated in Privacy Enhanced Mail.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-errors" data-module="" data-loc="362" data-importedbys="123" data-depheight="7" data-depdepth="3"><code>     <span class="order"> 87</span>. <a href="pkg/errors.html">errors</a><i class="importedbys"> (<a href="dep/errors.html#imported-by">123</a>)</i><i class="codelines"> (362)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions to manipulate errors.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-fmt" data-module="" data-loc="3547" data-importedbys="70" data-depheight="14" data-depdepth="2"><code>     <span class="order"> 88</span>. <a href="pkg/fmt.html">fmt</a><i class="importedbys"> (<a href="dep/fmt.html#imported-by">70</a>)</i><i class="codelines"> (3547)</i><i class="depheight"> (14)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements formatted I/O with functions analogous to C's printf and scanf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli" data-module="github.com/andybalholm/brotli" data-loc="257281" data-importedbys="1" data-depheight="27" data-depdepth="5"><code>     <span class="order"> 89</span>. <a href="pkg/github.com/andybalholm/brotli.html">github.com/andybalholm/brotli</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli.html#imported-by">1</a>)</i><i class="codelines"> (257281)</i><i class="depheight"> (27)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli/flate" data-module="github.com/andybalholm/brotli" data-loc="1074" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order"> 90</span>. <a href="pkg/github.com/andybalholm/brotli/flate.html" class="path-duplicate">github.com/andybalholm/brotli</a><a href="pkg/github.com/andybalholm/brotli/flate.html">/flate</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli/flate.html#imported-by">1</a>)</i><i class="codelines"> (1074)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/andybalholm/brotli/matchfinder" data-module="github.com/andybalholm/brotli" data-loc="2861" data-importedbys="2" data-depheight="15" data-depdepth="6"><code>     <span class="order"> 91</span>. <a href="pkg/github.com/andybalholm/brotli/matchfinder.html" class="path-duplicate">github.com/andybalholm/brotli</a><a href="pkg/github.com/andybalholm/brotli/matchfinder.html">/matchfinder</a><i class="importedbys"> (<a href="dep/github.com/andybalholm/brotli/matchfinder.html#imported-by">2</a>)</i><i class="codelines"> (2861)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - The matchfinder package defines reusable components for data compression.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/cenkalti/backoff/v4" data-module="github.com/cenkalti/backoff/v4" data-loc="660" data-importedbys="3" data-depheight="12" data-depdepth="1"><code>     <span class="order"> 92</span>. <a href="pkg/github.com/cenkalti/backoff/v4.html" class="path-duplicate">github.com</a><a href="pkg/github.com/cenkalti/backoff/v4.html">/cenkalti/backoff/v4</a><i class="importedbys"> (<a href="dep/github.com/cenkalti/backoff/v4.html#imported-by">3</a>)</i><i class="codelines"> (660)</i><i class="depheight"> (12)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements backoff algorithms for retrying operations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/cespare/xxhash/v2" data-module="github.com/cespare/xxhash/v2" data-loc="316" data-importedbys="1" data-depheight="11" data-depdepth="3"><code>     <span class="order"> 93</span>. <a href="pkg/github.com/cespare/xxhash/v2.html" class="path-duplicate">github.com</a><a href="pkg/github.com/cespare/xxhash/v2.html">/cespare/xxhash/v2</a><i class="importedbys"> (<a href="dep/github.com/cespare/xxhash/v2.html#imported-by">1</a>)</i><i class="codelines"> (316)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the 64-bit variant of xxHash (XXH64) as described at http://cyan4973.github.io/xxHash/.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket" data-module="github.com/coder/websocket" data-loc="3325" data-importedbys="3" data-depheight="27" data-depdepth="2"><code>     <span class="order"> 94</span>. <a href="pkg/github.com/coder/websocket.html" class="path-duplicate">github.com</a><a href="pkg/github.com/coder/websocket.html">/coder/websocket</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket.html#imported-by">3</a>)</i><i class="codelines"> (3325)</i><i class="depheight"> (27)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements the RFC 6455 WebSocket protocol.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/bpool" data-module="github.com/coder/websocket" data-loc="25" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order"> 95</span>. <a href="pkg/github.com/coder/websocket/internal/bpool.html" class="path-duplicate">github.com/coder/websocket</a><a href="pkg/github.com/coder/websocket/internal/bpool.html">/internal/bpool</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/bpool.html#imported-by">1</a>)</i><i class="codelines"> (25)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/errd" data-module="github.com/coder/websocket" data-loc="14" data-importedbys="1" data-depheight="15" data-depdepth="3"><code>     <span class="order"> 96</span>. <a href="pkg/github.com/coder/websocket/internal/errd.html" class="path-duplicate">github.com/coder/websocket/internal</a><a href="pkg/github.com/coder/websocket/internal/errd.html">/errd</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/errd.html#imported-by">1</a>)</i><i class="codelines"> (14)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/coder/websocket/internal/util" data-module="github.com/coder/websocket" data-loc="15" data-importedbys="1" data-depheight="1" data-depdepth="3"><code>     <span class="order"> 97</span>. <a href="pkg/github.com/coder/websocket/internal/util.html" class="path-duplicate">github.com/coder/websocket/internal</a><a href="pkg/github.com/coder/websocket/internal/util.html">/util</a><i class="importedbys"> (<a href="dep/github.com/coder/websocket/internal/util.html#imported-by">1</a>)</i><i class="codelines"> (15)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/errors" data-module="github.com/go-faster/errors" data-loc="556" data-importedbys="27" data-depheight="15" data-depdepth="1"><code>     <span class="order"> 98</span>. <a href="pkg/github.com/go-faster/errors.html" class="path-duplicate">github.com</a><a href="pkg/github.com/go-faster/errors.html">/go-faster/errors</a><i class="importedbys"> (<a href="dep/github.com/go-faster/errors.html#imported-by">27</a>)</i><i class="codelines"> (556)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements functions to manipulate errors.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/jx" data-module="github.com/go-faster/jx" data-loc="4828" data-importedbys="4" data-depheight="18" data-depdepth="1"><code>     <span class="order"> 99</span>. <a href="pkg/github.com/go-faster/jx.html" class="path-duplicate">github.com/go-faster</a><a href="pkg/github.com/go-faster/jx.html">/jx</a><i class="importedbys"> (<a href="dep/github.com/go-faster/jx.html#imported-by">4</a>)</i><i class="codelines"> (4828)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements RFC 7159 json encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/jx/internal/byteseq" data-module="github.com/go-faster/jx" data-loc="16" data-importedbys="1" data-depheight="2" data-depdepth="2"><code>     <span class="order">100</span>. <a href="pkg/github.com/go-faster/jx/internal/byteseq.html" class="path-duplicate">github.com/go-faster/jx</a><a href="pkg/github.com/go-faster/jx/internal/byteseq.html">/internal/byteseq</a><i class="importedbys"> (<a href="dep/github.com/go-faster/jx/internal/byteseq.html#imported-by">1</a>)</i><i class="codelines"> (16)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a Byteseq type that can be used to represent a sequence of bytes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/go-faster/xor" data-module="github.com/go-faster/xor" data-loc="30" data-importedbys="3" data-depheight="1" data-depdepth="2"><code>     <span class="order">101</span>. <a href="pkg/github.com/go-faster/xor.html" class="path-duplicate">github.com/go-faster</a><a href="pkg/github.com/go-faster/xor.html">/xor</a><i class="importedbys"> (<a href="dep/github.com/go-faster/xor.html#imported-by">3</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/ige" data-module="github.com/gotd/ige" data-loc="212" data-importedbys="2" data-depheight="20" data-depdepth="2"><code>     <span class="order">102</span>. <a href="pkg/github.com/gotd/ige.html" class="path-duplicate">github.com</a><a href="pkg/github.com/gotd/ige.html">/gotd/ige</a><i class="importedbys"> (<a href="dep/github.com/gotd/ige.html#imported-by">2</a>)</i><i class="codelines"> (212)</i><i class="depheight"> (20)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/log" data-module="github.com/gotd/log" data-loc="460" data-importedbys="8" data-depheight="15" data-depdepth="1"><code>     <span class="order">103</span>. <a href="pkg/github.com/gotd/log.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/log.html">/log</a><i class="importedbys"> (<a href="dep/github.com/gotd/log.html#imported-by">8</a>)</i><i class="codelines"> (460)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - defines a minimal, dependency-free logging port for gotd libraries.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/neo" data-module="github.com/gotd/neo" data-loc="538" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">104</span>. <a href="pkg/github.com/gotd/neo.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/neo.html">/neo</a><i class="importedbys"> (<a href="dep/github.com/gotd/neo.html#imported-by">1</a>)</i><i class="codelines"> (538)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements side effects simulation for testing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/ascii" data-module="github.com/gotd/td" data-loc="19" data-importedbys="1" data-depheight="1" data-depdepth="2"><code>     <span class="order">105</span>. <a href="pkg/github.com/gotd/td/ascii.html" class="path-duplicate">github.com/gotd</a><a href="pkg/github.com/gotd/td/ascii.html">/td/ascii</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/ascii.html#imported-by">1</a>)</i><i class="codelines"> (19)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides data and functions to test some properties of ASCII code points.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/bin" data-module="github.com/gotd/td" data-loc="742" data-importedbys="17" data-depheight="16" data-depdepth="1"><code>     <span class="order">106</span>. <a href="pkg/github.com/gotd/td/bin.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/bin.html">/bin</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/bin.html#imported-by">17</a>)</i><i class="codelines"> (742)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements binary serialization and deserialization for TL, providing Buffer that can decode and encode basic Type Language types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/clock" data-module="github.com/gotd/td" data-loc="81" data-importedbys="9" data-depheight="16" data-depdepth="1"><code>     <span class="order">107</span>. <a href="pkg/github.com/gotd/td/clock.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/clock.html">/clock</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/clock.html#imported-by">9</a>)</i><i class="codelines"> (81)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - abstracts time source.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/constant" data-module="github.com/gotd/td" data-loc="146" data-importedbys="1" data-depheight="1" data-depdepth="1"><code>     <span class="order">108</span>. <a href="pkg/github.com/gotd/td/constant.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/constant.html">/constant</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/constant.html#imported-by">1</a>)</i><i class="codelines"> (146)</i><i class="depheight"> (1)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - wraps Telegram-defined constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/crypto" data-module="github.com/gotd/td" data-loc="1943" data-importedbys="12" data-depheight="23" data-depdepth="1"><code>     <span class="order">109</span>. <a href="pkg/github.com/gotd/td/crypto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/crypto.html">/crypto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/crypto.html#imported-by">12</a>)</i><i class="codelines"> (1943)</i><i class="depheight"> (23)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements cryptographical primitives for MTproto.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/crypto/srp" data-module="github.com/gotd/td" data-loc="258" data-importedbys="1" data-depheight="24" data-depdepth="2"><code>     <span class="order">110</span>. <a href="pkg/github.com/gotd/td/crypto/srp.html" class="path-duplicate">github.com/gotd/td/crypto</a><a href="pkg/github.com/gotd/td/crypto/srp.html">/srp</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/crypto/srp.html#imported-by">1</a>)</i><i class="codelines"> (258)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains implementation of Secure Remote Password protocol.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/exchange" data-module="github.com/gotd/td" data-loc="1053" data-importedbys="3" data-depheight="30" data-depdepth="1"><code>     <span class="order">111</span>. <a href="pkg/github.com/gotd/td/exchange.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/exchange.html">/exchange</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/exchange.html#imported-by">3</a>)</i><i class="codelines"> (1053)</i><i class="depheight"> (30)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram key exchange algorithm flows.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mt" data-module="github.com/gotd/td" data-loc="9454" data-importedbys="4" data-depheight="20" data-depdepth="1"><code>     <span class="order">112</span>. <a href="pkg/github.com/gotd/td/mt.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mt.html">/mt</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mt.html#imported-by">4</a>)</i><i class="codelines"> (9454)</i><i class="depheight"> (20)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains generated code based on mtproto schema.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproto" data-module="github.com/gotd/td" data-loc="2196" data-importedbys="3" data-depheight="31" data-depdepth="1"><code>     <span class="order">113</span>. <a href="pkg/github.com/gotd/td/mtproto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mtproto.html">/mtproto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproto.html#imported-by">3</a>)</i><i class="codelines"> (2196)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements MTProto connection.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproto/salts" data-module="github.com/gotd/td" data-loc="90" data-importedbys="1" data-depheight="21" data-depdepth="2"><code>     <span class="order">114</span>. <a href="pkg/github.com/gotd/td/mtproto/salts.html" class="path-duplicate">github.com/gotd/td/mtproto</a><a href="pkg/github.com/gotd/td/mtproto/salts.html">/salts</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproto/salts.html#imported-by">1</a>)</i><i class="codelines"> (90)</i><i class="depheight"> (21)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProto server salt storage.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy" data-module="github.com/gotd/td" data-loc="86" data-importedbys="4" data-depheight="25" data-depdepth="2"><code>     <span class="order">115</span>. <a href="pkg/github.com/gotd/td/mtproxy.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/mtproxy.html">/mtproxy</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy.html#imported-by">4</a>)</i><i class="codelines"> (86)</i><i class="depheight"> (25)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProxy transport implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/faketls" data-module="github.com/gotd/td" data-loc="414" data-importedbys="1" data-depheight="29" data-depdepth="3"><code>     <span class="order">116</span>. <a href="pkg/github.com/gotd/td/mtproxy/faketls.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/faketls.html">/faketls</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/faketls.html#imported-by">1</a>)</i><i class="codelines"> (414)</i><i class="depheight"> (29)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains faketls implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/obfuscated2" data-module="github.com/gotd/td" data-loc="241" data-importedbys="2" data-depheight="26" data-depdepth="2"><code>     <span class="order">117</span>. <a href="pkg/github.com/gotd/td/mtproxy/obfuscated2.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/obfuscated2.html">/obfuscated2</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/obfuscated2.html#imported-by">2</a>)</i><i class="codelines"> (241)</i><i class="depheight"> (26)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains obfuscated2 implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/mtproxy/obfuscator" data-module="github.com/gotd/td" data-loc="92" data-importedbys="1" data-depheight="30" data-depdepth="2"><code>     <span class="order">118</span>. <a href="pkg/github.com/gotd/td/mtproxy/obfuscator.html" class="path-duplicate">github.com/gotd/td/mtproxy</a><a href="pkg/github.com/gotd/td/mtproxy/obfuscator.html">/obfuscator</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/mtproxy/obfuscator.html#imported-by">1</a>)</i><i class="codelines"> (92)</i><i class="depheight"> (30)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains some MTProxy obfuscation utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/oteltg" data-module="github.com/gotd/td" data-loc="6" data-importedbys="1" data-depheight="1" data-depdepth="1"><code>     <span class="order">119</span>. <a href="pkg/github.com/gotd/td/oteltg.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/oteltg.html">/oteltg</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/oteltg.html#imported-by">1</a>)</i><i class="codelines"> (6)</i><i class="depheight"> (1)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provide OpenTelemetry instrumentation for gotd.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/pool" data-module="github.com/gotd/td" data-loc="491" data-importedbys="2" data-depheight="32" data-depdepth="1"><code>     <span class="order">120</span>. <a href="pkg/github.com/gotd/td/pool.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/pool.html">/pool</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/pool.html#imported-by">2</a>)</i><i class="codelines"> (491)</i><i class="depheight"> (32)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram connections pool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/proto" data-module="github.com/gotd/td" data-loc="621" data-importedbys="3" data-depheight="18" data-depdepth="1"><code>     <span class="order">121</span>. <a href="pkg/github.com/gotd/td/proto.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/proto.html">/proto</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/proto.html#imported-by">3</a>)</i><i class="codelines"> (621)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements MTProto 2.0 primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/proto/codec" data-module="github.com/gotd/td" data-loc="662" data-importedbys="5" data-depheight="24" data-depdepth="2"><code>     <span class="order">122</span>. <a href="pkg/github.com/gotd/td/proto/codec.html" class="path-duplicate">github.com/gotd/td/proto</a><a href="pkg/github.com/gotd/td/proto/codec.html">/codec</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/proto/codec.html#imported-by">5</a>)</i><i class="codelines"> (662)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains MTProto transport encoding implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/rpc" data-module="github.com/gotd/td" data-loc="453" data-importedbys="3" data-depheight="17" data-depdepth="1"><code>     <span class="order">123</span>. <a href="pkg/github.com/gotd/td/rpc.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/rpc.html">/rpc</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/rpc.html#imported-by">3</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements rpc engine.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/session" data-module="github.com/gotd/td" data-loc="480" data-importedbys="1" data-depheight="32" data-depdepth="1"><code>     <span class="order">124</span>. <a href="pkg/github.com/gotd/td/session.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/session.html">/session</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/session.html#imported-by">1</a>)</i><i class="codelines"> (480)</i><i class="depheight"> (32)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements session storage.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/session/tdesktop" data-module="github.com/gotd/td" data-loc="1213" data-importedbys="1" data-depheight="24" data-depdepth="2"><code>     <span class="order">125</span>. <a href="pkg/github.com/gotd/td/session/tdesktop.html" class="path-duplicate">github.com/gotd/td/session</a><a href="pkg/github.com/gotd/td/session/tdesktop.html">/tdesktop</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/session/tdesktop.html#imported-by">1</a>)</i><i class="codelines"> (1213)</i><i class="depheight"> (24)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains Telegram Desktop session decoder.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/syncio" data-module="github.com/gotd/td" data-loc="125" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">126</span>. <a href="pkg/github.com/gotd/td/syncio.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/syncio.html">/syncio</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/syncio.html#imported-by">1</a>)</i><i class="codelines"> (125)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains synchronized wrappers for interfaces from io package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdjson" data-module="github.com/gotd/td" data-loc="347" data-importedbys="3" data-depheight="19" data-depdepth="1"><code>     <span class="order">127</span>. <a href="pkg/github.com/gotd/td/tdjson.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdjson.html">/tdjson</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdjson.html#imported-by">3</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (19)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains some helpers to use jx with TL objects.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdp" data-module="github.com/gotd/td" data-loc="148" data-importedbys="2" data-depheight="15" data-depdepth="2"><code>     <span class="order">128</span>. <a href="pkg/github.com/gotd/td/tdp.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdp.html">/tdp</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdp.html#imported-by">2</a>)</i><i class="codelines"> (148)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - is td pretty-printing and formatting facilities for types from MTProto.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tdsync" data-module="github.com/gotd/td" data-loc="304" data-importedbys="6" data-depheight="17" data-depdepth="1"><code>     <span class="order">129</span>. <a href="pkg/github.com/gotd/td/tdsync.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tdsync.html">/tdsync</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tdsync.html#imported-by">6</a>)</i><i class="codelines"> (304)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains some useful synchronization utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram" data-module="github.com/gotd/td" data-loc="3258" data-importedbys="0" data-depheight="34" data-depdepth="0"><code>     <span class="order">130</span>. <a href="pkg/github.com/gotd/td/telegram.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/telegram.html">/telegram</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram.html#imported-by">0</a>)</i><i class="codelines"> (3258)</i><i class="depheight"> (34)</i><i class="depdepth"> (0)</i><span class="pkg-summary"> - implements Telegram client.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/auth" data-module="github.com/gotd/td" data-loc="1001" data-importedbys="1" data-depheight="25" data-depdepth="1"><code>     <span class="order">131</span>. <a href="pkg/github.com/gotd/td/telegram/auth.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/auth.html">/auth</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/auth.html#imported-by">1</a>)</i><i class="codelines"> (1001)</i><i class="depheight"> (25)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides authentication on top of tg.Client.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/auth/qrlogin" data-module="github.com/gotd/td" data-loc="348" data-importedbys="1" data-depheight="21" data-depdepth="1"><code>     <span class="order">132</span>. <a href="pkg/github.com/gotd/td/telegram/auth/qrlogin.html" class="path-duplicate">github.com/gotd/td/telegram/auth</a><a href="pkg/github.com/gotd/td/telegram/auth/qrlogin.html">/qrlogin</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/auth/qrlogin.html#imported-by">1</a>)</i><i class="codelines"> (348)</i><i class="depheight"> (21)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides QR login flow implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/dcs" data-module="github.com/gotd/td" data-loc="1420" data-importedbys="2" data-depheight="31" data-depdepth="1"><code>     <span class="order">133</span>. <a href="pkg/github.com/gotd/td/telegram/dcs.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/dcs.html">/dcs</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/dcs.html#imported-by">2</a>)</i><i class="codelines"> (1420)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains Telegram DCs list and some helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/downloader" data-module="github.com/gotd/td" data-loc="1931" data-importedbys="1" data-depheight="31" data-depdepth="1"><code>     <span class="order">134</span>. <a href="pkg/github.com/gotd/td/telegram/downloader.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/downloader.html">/downloader</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/downloader.html#imported-by">1</a>)</i><i class="codelines"> (1931)</i><i class="depheight"> (31)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains downloading files helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/manager" data-module="github.com/gotd/td" data-loc="653" data-importedbys="1" data-depheight="33" data-depdepth="1"><code>     <span class="order">135</span>. <a href="pkg/github.com/gotd/td/telegram/internal/manager.html" class="path-duplicate">github.com/gotd/td/telegram</a><a href="pkg/github.com/gotd/td/telegram/internal/manager.html">/internal/manager</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/manager.html#imported-by">1</a>)</i><i class="codelines"> (653)</i><i class="depheight"> (33)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains connection management utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/upconv" data-module="github.com/gotd/td" data-loc="124" data-importedbys="1" data-depheight="21" data-depdepth="1"><code>     <span class="order">136</span>. <a href="pkg/github.com/gotd/td/telegram/internal/upconv.html" class="path-duplicate">github.com/gotd/td/telegram/internal</a><a href="pkg/github.com/gotd/td/telegram/internal/upconv.html">/upconv</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/upconv.html#imported-by">1</a>)</i><i class="codelines"> (124)</i><i class="depheight"> (21)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains updates conversion helpers.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/telegram/internal/version" data-module="github.com/gotd/td" data-loc="36" data-importedbys="2" data-depheight="16" data-depdepth="1"><code>     <span class="order">137</span>. <a href="pkg/github.com/gotd/td/telegram/internal/version.html" class="path-duplicate">github.com/gotd/td/telegram/internal</a><a href="pkg/github.com/gotd/td/telegram/internal/version.html">/version</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/telegram/internal/version.html#imported-by">2</a>)</i><i class="codelines"> (36)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains gotd module version getter.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tg" data-module="github.com/gotd/td" data-loc="842297" data-importedbys="9" data-depheight="20" data-depdepth="1"><code>     <span class="order">138</span>. <a href="pkg/github.com/gotd/td/tg.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tg.html">/tg</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tg.html#imported-by">9</a>)</i><i class="codelines"> (842297)</i><i class="depheight"> (20)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains generated types from MTProto Telegram API.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tgerr" data-module="github.com/gotd/td" data-loc="229" data-importedbys="7" data-depheight="17" data-depdepth="1"><code>     <span class="order">139</span>. <a href="pkg/github.com/gotd/td/tgerr.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tgerr.html">/tgerr</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tgerr.html#imported-by">7</a>)</i><i class="codelines"> (229)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - implements helpers for error handling.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/tmap" data-module="github.com/gotd/td" data-loc="71" data-importedbys="2" data-depheight="17" data-depdepth="1"><code>     <span class="order">140</span>. <a href="pkg/github.com/gotd/td/tmap.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/tmap.html">/tmap</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/tmap.html#imported-by">2</a>)</i><i class="codelines"> (71)</i><i class="depheight"> (17)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides type mapping facility that maps type id to type name.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/transport" data-module="github.com/gotd/td" data-loc="551" data-importedbys="4" data-depheight="29" data-depdepth="1"><code>     <span class="order">141</span>. <a href="pkg/github.com/gotd/td/transport.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/transport.html">/transport</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/transport.html#imported-by">4</a>)</i><i class="codelines"> (551)</i><i class="depheight"> (29)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - contains different MTProto transport implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/gotd/td/wsutil" data-module="github.com/gotd/td" data-loc="15" data-importedbys="2" data-depheight="28" data-depdepth="2"><code>     <span class="order">142</span>. <a href="pkg/github.com/gotd/td/wsutil.html" class="path-duplicate">github.com/gotd/td</a><a href="pkg/github.com/gotd/td/wsutil.html">/wsutil</a><i class="importedbys"> (<a href="dep/github.com/gotd/td/wsutil.html#imported-by">2</a>)</i><i class="codelines"> (15)</i><i class="depheight"> (28)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - contains some Websocket utilities.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress" data-module="github.com/klauspost/compress" data-loc="85" data-importedbys="1" data-depheight="4" data-depdepth="6"><code>     <span class="order">143</span>. <a href="pkg/github.com/klauspost/compress.html" class="path-duplicate">github.com</a><a href="pkg/github.com/klauspost/compress.html">/klauspost/compress</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress.html#imported-by">1</a>)</i><i class="codelines"> (85)</i><i class="depheight"> (4)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/flate" data-module="github.com/klauspost/compress" data-loc="8271" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order">144</span>. <a href="pkg/github.com/klauspost/compress/flate.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/flate.html">/flate</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/flate.html#imported-by">1</a>)</i><i class="codelines"> (8271)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the DEFLATE compressed data format, described in RFC 1951.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/fse" data-module="github.com/klauspost/compress" data-loc="1539" data-importedbys="1" data-depheight="15" data-depdepth="7"><code>     <span class="order">145</span>. <a href="pkg/github.com/klauspost/compress/fse.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/fse.html">/fse</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/fse.html#imported-by">1</a>)</i><i class="codelines"> (1539)</i><i class="depheight"> (15)</i><i class="depdepth"> (7)</i><span class="pkg-summary"> - provides Finite State Entropy encoding and decoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/gzip" data-module="github.com/klauspost/compress" data-loc="670" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">146</span>. <a href="pkg/github.com/klauspost/compress/gzip.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/gzip.html">/gzip</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/gzip.html#imported-by">1</a>)</i><i class="codelines"> (670)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements reading and writing of gzip format compressed files, as specified in RFC 1952.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/huff0" data-module="github.com/klauspost/compress" data-loc="2956" data-importedbys="1" data-depheight="16" data-depdepth="6"><code>     <span class="order">147</span>. <a href="pkg/github.com/klauspost/compress/huff0.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/huff0.html">/huff0</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/huff0.html#imported-by">1</a>)</i><i class="codelines"> (2956)</i><i class="depheight"> (16)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - This file contains the specialisation of Decoder.Decompress4X and Decoder.Decompress1X that use an asm implementation of thir main loops.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/cpuinfo" data-module="github.com/klauspost/compress" data-loc="44" data-importedbys="2" data-depheight="1" data-depdepth="6"><code>     <span class="order">148</span>. <a href="pkg/github.com/klauspost/compress/internal/cpuinfo.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/internal/cpuinfo.html">/internal/cpuinfo</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/cpuinfo.html#imported-by">2</a>)</i><i class="codelines"> (44)</i><i class="depheight"> (1)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - gives runtime info about the current CPU.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/le" data-module="github.com/klauspost/compress" data-loc="57" data-importedbys="3" data-depheight="2" data-depdepth="4"><code>     <span class="order">149</span>. <a href="pkg/github.com/klauspost/compress/internal/le.html" class="path-duplicate">github.com/klauspost/compress/internal</a><a href="pkg/github.com/klauspost/compress/internal/le.html">/le</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/le.html#imported-by">3</a>)</i><i class="codelines"> (57)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/internal/snapref" data-module="github.com/klauspost/compress" data-loc="1016" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">150</span>. <a href="pkg/github.com/klauspost/compress/internal/snapref.html" class="path-duplicate">github.com/klauspost/compress/internal</a><a href="pkg/github.com/klauspost/compress/internal/snapref.html">/snapref</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/internal/snapref.html#imported-by">1</a>)</i><i class="codelines"> (1016)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the Snappy compression format.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/zstd" data-module="github.com/klauspost/compress" data-loc="13531" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order">151</span>. <a href="pkg/github.com/klauspost/compress/zstd.html" class="path-duplicate">github.com/klauspost/compress</a><a href="pkg/github.com/klauspost/compress/zstd.html">/zstd</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/zstd.html#imported-by">1</a>)</i><i class="codelines"> (13531)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides decompression of zstandard files.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/klauspost/compress/zstd/internal/xxhash" data-module="github.com/klauspost/compress" data-loc="257" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">152</span>. <a href="pkg/github.com/klauspost/compress/zstd/internal/xxhash.html" class="path-duplicate">github.com/klauspost/compress/zstd</a><a href="pkg/github.com/klauspost/compress/zstd/internal/xxhash.html">/internal/xxhash</a><i class="importedbys"> (<a href="dep/github.com/klauspost/compress/zstd/internal/xxhash.html#imported-by">1</a>)</i><i class="codelines"> (257)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls" data-module="github.com/refraction-networking/utls" data-loc="25388" data-importedbys="1" data-depheight="28" data-depdepth="4"><code>     <span class="order">153</span>. <a href="pkg/github.com/refraction-networking/utls.html" class="path-duplicate">github.com</a><a href="pkg/github.com/refraction-networking/utls.html">/refraction-networking/utls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls.html#imported-by">1</a>)</i><i class="codelines"> (25388)</i><i class="depheight"> (28)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/dicttls" data-module="github.com/refraction-networking/utls" data-loc="2593" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">154</span>. <a href="pkg/github.com/refraction-networking/utls/dicttls.html" class="path-duplicate">github.com/refraction-networking/utls</a><a href="pkg/github.com/refraction-networking/utls/dicttls.html">/dicttls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/dicttls.html#imported-by">1</a>)</i><i class="codelines"> (2593)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/boring" data-module="github.com/refraction-networking/utls" data-loc="20" data-importedbys="1" data-depheight="18" data-depdepth="5"><code>     <span class="order">155</span>. <a href="pkg/github.com/refraction-networking/utls/internal/boring.html" class="path-duplicate">github.com/refraction-networking/utls</a><a href="pkg/github.com/refraction-networking/utls/internal/boring.html">/internal/boring</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/boring.html#imported-by">1</a>)</i><i class="codelines"> (20)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/byteorder" data-module="github.com/refraction-networking/utls" data-loc="149" data-importedbys="3" data-depheight="1" data-depdepth="5"><code>     <span class="order">156</span>. <a href="pkg/github.com/refraction-networking/utls/internal/byteorder.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/byteorder.html">/byteorder</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/byteorder.html#imported-by">3</a>)</i><i class="codelines"> (149)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides functions for decoding and encoding little and big endian integer types from/to byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/fips140tls" data-module="github.com/refraction-networking/utls" data-loc="5" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">157</span>. <a href="pkg/github.com/refraction-networking/utls/internal/fips140tls.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/fips140tls.html">/fips140tls</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/fips140tls.html#imported-by">1</a>)</i><i class="codelines"> (5)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/helper" data-module="github.com/refraction-networking/utls" data-loc="23" data-importedbys="1" data-depheight="18" data-depdepth="5"><code>     <span class="order">158</span>. <a href="pkg/github.com/refraction-networking/utls/internal/helper.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/helper.html">/helper</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/helper.html#imported-by">1</a>)</i><i class="codelines"> (23)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/hkdf" data-module="github.com/refraction-networking/utls" data-loc="24" data-importedbys="3" data-depheight="18" data-depdepth="5"><code>     <span class="order">159</span>. <a href="pkg/github.com/refraction-networking/utls/internal/hkdf.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/hkdf.html#imported-by">3</a>)</i><i class="codelines"> (24)</i><i class="depheight"> (18)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/hpke" data-module="github.com/refraction-networking/utls" data-loc="333" data-importedbys="1" data-depheight="21" data-depdepth="5"><code>     <span class="order">160</span>. <a href="pkg/github.com/refraction-networking/utls/internal/hpke.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/hpke.html">/hpke</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/hpke.html#imported-by">1</a>)</i><i class="codelines"> (333)</i><i class="depheight"> (21)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/quicvarint" data-module="github.com/refraction-networking/utls" data-loc="146" data-importedbys="1" data-depheight="16" data-depdepth="5"><code>     <span class="order">161</span>. <a href="pkg/github.com/refraction-networking/utls/internal/quicvarint.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/quicvarint.html">/quicvarint</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/quicvarint.html#imported-by">1</a>)</i><i class="codelines"> (146)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/quicvarint/protocol" data-module="github.com/refraction-networking/utls" data-loc="157" data-importedbys="1" data-depheight="15" data-depdepth="6"><code>     <span class="order">162</span>. <a href="pkg/github.com/refraction-networking/utls/internal/quicvarint/protocol.html" class="path-duplicate">github.com/refraction-networking/utls/internal/quicvarint</a><a href="pkg/github.com/refraction-networking/utls/internal/quicvarint/protocol.html">/protocol</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/quicvarint/protocol.html#imported-by">1</a>)</i><i class="codelines"> (157)</i><i class="depheight"> (15)</i><i class="depdepth"> (6)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/tls12" data-module="github.com/refraction-networking/utls" data-loc="69" data-importedbys="1" data-depheight="20" data-depdepth="5"><code>     <span class="order">163</span>. <a href="pkg/github.com/refraction-networking/utls/internal/tls12.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/tls12.html">/tls12</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/tls12.html#imported-by">1</a>)</i><i class="codelines"> (69)</i><i class="depheight"> (20)</i><i class="depdepth"> (5)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/refraction-networking/utls/internal/tls13" data-module="github.com/refraction-networking/utls" data-loc="210" data-importedbys="1" data-depheight="19" data-depdepth="5"><code>     <span class="order">164</span>. <a href="pkg/github.com/refraction-networking/utls/internal/tls13.html" class="path-duplicate">github.com/refraction-networking/utls/internal</a><a href="pkg/github.com/refraction-networking/utls/internal/tls13.html">/tls13</a><i class="importedbys"> (<a href="dep/github.com/refraction-networking/utls/internal/tls13.html#imported-by">1</a>)</i><i class="codelines"> (210)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/base64" data-module="github.com/segmentio/asm" data-loc="255" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">165</span>. <a href="pkg/github.com/segmentio/asm/base64.html" class="path-duplicate">github.com</a><a href="pkg/github.com/segmentio/asm/base64.html">/segmentio/asm/base64</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/base64.html#imported-by">1</a>)</i><i class="codelines"> (255)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu" data-module="github.com/segmentio/asm" data-loc="22" data-importedbys="1" data-depheight="16" data-depdepth="3"><code>     <span class="order">166</span>. <a href="pkg/github.com/segmentio/asm/cpu.html" class="path-duplicate">github.com/segmentio/asm</a><a href="pkg/github.com/segmentio/asm/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu.html#imported-by">1</a>)</i><i class="codelines"> (22)</i><i class="depheight"> (16)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - Pakage cpu provides APIs to detect CPU features available at runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/arm" data-module="github.com/segmentio/asm" data-loc="80" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">167</span>. <a href="pkg/github.com/segmentio/asm/cpu/arm.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/arm.html">/arm</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/arm.html#imported-by">1</a>)</i><i class="codelines"> (80)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/arm64" data-module="github.com/segmentio/asm" data-loc="74" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">168</span>. <a href="pkg/github.com/segmentio/asm/cpu/arm64.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/arm64.html">/arm64</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/arm64.html#imported-by">1</a>)</i><i class="codelines"> (74)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/cpuid" data-module="github.com/segmentio/asm" data-loc="32" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">169</span>. <a href="pkg/github.com/segmentio/asm/cpu/cpuid.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/cpuid.html">/cpuid</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/cpuid.html#imported-by">3</a>)</i><i class="codelines"> (32)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides generic types used to represent CPU features supported by the architecture.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/cpu/x86" data-module="github.com/segmentio/asm" data-loc="76" data-importedbys="2" data-depheight="15" data-depdepth="3"><code>     <span class="order">170</span>. <a href="pkg/github.com/segmentio/asm/cpu/x86.html" class="path-duplicate">github.com/segmentio/asm/cpu</a><a href="pkg/github.com/segmentio/asm/cpu/x86.html">/x86</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/cpu/x86.html#imported-by">2</a>)</i><i class="codelines"> (76)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-github.com/segmentio/asm/internal/unsafebytes" data-module="github.com/segmentio/asm" data-loc="20" data-importedbys="1" data-depheight="2" data-depdepth="3"><code>     <span class="order">171</span>. <a href="pkg/github.com/segmentio/asm/internal/unsafebytes.html" class="path-duplicate">github.com/segmentio/asm</a><a href="pkg/github.com/segmentio/asm/internal/unsafebytes.html">/internal/unsafebytes</a><i class="importedbys"> (<a href="dep/github.com/segmentio/asm/internal/unsafebytes.html#imported-by">1</a>)</i><i class="codelines"> (20)</i><i class="depheight"> (2)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute" data-module="go.opentelemetry.io/otel" data-loc="2243" data-importedbys="3" data-depheight="16" data-depdepth="1"><code>     <span class="order">172</span>. <a href="pkg/go.opentelemetry.io/otel/attribute.html">go.opentelemetry.io/otel/attribute</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute.html#imported-by">3</a>)</i><i class="codelines"> (2243)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides key and value attributes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute/internal" data-module="go.opentelemetry.io/otel" data-loc="75" data-importedbys="1" data-depheight="10" data-depdepth="2"><code>     <span class="order">173</span>. <a href="pkg/go.opentelemetry.io/otel/attribute/internal.html" class="path-duplicate">go.opentelemetry.io/otel/attribute</a><a href="pkg/go.opentelemetry.io/otel/attribute/internal.html">/internal</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute/internal.html#imported-by">1</a>)</i><i class="codelines"> (75)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provide several helper functions for some commonly used logic of processing attributes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/attribute/internal/xxhash" data-module="go.opentelemetry.io/otel" data-loc="64" data-importedbys="1" data-depheight="12" data-depdepth="2"><code>     <span class="order">174</span>. <a href="pkg/go.opentelemetry.io/otel/attribute/internal/xxhash.html" class="path-duplicate">go.opentelemetry.io/otel/attribute/internal</a><a href="pkg/go.opentelemetry.io/otel/attribute/internal/xxhash.html">/xxhash</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/attribute/internal/xxhash.html#imported-by">1</a>)</i><i class="codelines"> (64)</i><i class="depheight"> (12)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a wrapper around the xxhash library for attribute hashing.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/codes" data-module="go.opentelemetry.io/otel" data-loc="116" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">175</span>. <a href="pkg/go.opentelemetry.io/otel/codes.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/codes.html">/codes</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/codes.html#imported-by">1</a>)</i><i class="codelines"> (116)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - defines the canonical error codes used by OpenTelemetry.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/semconv/v1.41.0" data-module="go.opentelemetry.io/otel" data-loc="17401" data-importedbys="1" data-depheight="17" data-depdepth="2"><code>     <span class="order">176</span>. <a href="pkg/go.opentelemetry.io/otel/semconv/v1.41.0.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/semconv/v1.41.0.html">/semconv/v1.41.0</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/semconv/v1.41.0.html#imported-by">1</a>)</i><i class="codelines"> (17401)</i><i class="depheight"> (17)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements OpenTelemetry semantic conventions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace" data-module="go.opentelemetry.io/otel/trace" data-loc="2383" data-importedbys="2" data-depheight="18" data-depdepth="1"><code>     <span class="order">177</span>. <a href="pkg/go.opentelemetry.io/otel/trace.html" class="path-duplicate">go.opentelemetry.io/otel</a><a href="pkg/go.opentelemetry.io/otel/trace.html">/trace</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace.html#imported-by">2</a>)</i><i class="codelines"> (2383)</i><i class="depheight"> (18)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides an implementation of the tracing part of the OpenTelemetry API.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace/embedded" data-module="go.opentelemetry.io/otel/trace" data-loc="45" data-importedbys="1" data-depheight="1" data-depdepth="2"><code>     <span class="order">178</span>. <a href="pkg/go.opentelemetry.io/otel/trace/embedded.html" class="path-duplicate">go.opentelemetry.io/otel/trace</a><a href="pkg/go.opentelemetry.io/otel/trace/embedded.html">/embedded</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace/embedded.html#imported-by">1</a>)</i><i class="codelines"> (45)</i><i class="depheight"> (1)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides interfaces embedded within the [OpenTelemetry trace API].</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.opentelemetry.io/otel/trace/internal/telemetry" data-module="go.opentelemetry.io/otel/trace" data-loc="1525" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">179</span>. <a href="pkg/go.opentelemetry.io/otel/trace/internal/telemetry.html" class="path-duplicate">go.opentelemetry.io/otel/trace</a><a href="pkg/go.opentelemetry.io/otel/trace/internal/telemetry.html">/internal/telemetry</a><i class="importedbys"> (<a href="dep/go.opentelemetry.io/otel/trace/internal/telemetry.html#imported-by">1</a>)</i><i class="codelines"> (1525)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a lightweight representations of OpenTelemetry telemetry that is compatible with the OTLP JSON protobuf encoding.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.uber.org/atomic" data-module="go.uber.org/atomic" data-loc="1716" data-importedbys="3" data-depheight="16" data-depdepth="1"><code>     <span class="order">180</span>. <a href="pkg/go.uber.org/atomic.html">go.uber.org/atomic</a><i class="importedbys"> (<a href="dep/go.uber.org/atomic.html#imported-by">3</a>)</i><i class="codelines"> (1716)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides simple wrappers around numerics to enforce atomic access.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-go.uber.org/multierr" data-module="go.uber.org/multierr" data-loc="694" data-importedbys="9" data-depheight="15" data-depdepth="1"><code>     <span class="order">181</span>. <a href="pkg/go.uber.org/multierr.html" class="path-duplicate">go.uber.org</a><a href="pkg/go.uber.org/multierr.html">/multierr</a><i class="importedbys"> (<a href="dep/go.uber.org/multierr.html#imported-by">9</a>)</i><i class="codelines"> (694)</i><i class="depheight"> (15)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - allows combining one or more errors together.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/chacha20" data-module="golang.org/x/crypto" data-loc="453" data-importedbys="1" data-depheight="18" data-depdepth="6"><code>     <span class="order">182</span>. <a href="pkg/golang.org/x/crypto/chacha20.html">golang.org/x/crypto/chacha20</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/chacha20.html#imported-by">1</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (18)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/chacha20poly1305" data-module="golang.org/x/crypto" data-loc="380" data-importedbys="2" data-depheight="19" data-depdepth="5"><code>     <span class="order">183</span>. <a href="pkg/golang.org/x/crypto/chacha20poly1305.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/chacha20poly1305.html">/chacha20poly1305</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/chacha20poly1305.html#imported-by">2</a>)</i><i class="codelines"> (380)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/cryptobyte" data-module="golang.org/x/crypto" data-loc="1358" data-importedbys="2" data-depheight="17" data-depdepth="5"><code>     <span class="order">184</span>. <a href="pkg/golang.org/x/crypto/cryptobyte.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/cryptobyte.html">/cryptobyte</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/cryptobyte.html#imported-by">2</a>)</i><i class="codelines"> (1358)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/cryptobyte/asn1" data-module="golang.org/x/crypto" data-loc="46" data-importedbys="1" data-depheight="1" data-depdepth="6"><code>     <span class="order">185</span>. <a href="pkg/golang.org/x/crypto/cryptobyte/asn1.html" class="path-duplicate">golang.org/x/crypto/cryptobyte</a><a href="pkg/golang.org/x/crypto/cryptobyte/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/cryptobyte/asn1.html#imported-by">1</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/hkdf" data-module="golang.org/x/crypto" data-loc="100" data-importedbys="1" data-depheight="20" data-depdepth="5"><code>     <span class="order">186</span>. <a href="pkg/golang.org/x/crypto/hkdf.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/hkdf.html">/hkdf</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/hkdf.html#imported-by">1</a>)</i><i class="codelines"> (100)</i><i class="depheight"> (20)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/internal/alias" data-module="golang.org/x/crypto" data-loc="31" data-importedbys="2" data-depheight="2" data-depdepth="6"><code>     <span class="order">187</span>. <a href="pkg/golang.org/x/crypto/internal/alias.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/internal/alias.html">/internal/alias</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/internal/alias.html#imported-by">2</a>)</i><i class="codelines"> (31)</i><i class="depheight"> (2)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/internal/poly1305" data-module="golang.org/x/crypto" data-loc="458" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">188</span>. <a href="pkg/golang.org/x/crypto/internal/poly1305.html" class="path-duplicate">golang.org/x/crypto/internal</a><a href="pkg/golang.org/x/crypto/internal/poly1305.html">/poly1305</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/internal/poly1305.html#imported-by">1</a>)</i><i class="codelines"> (458)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements Poly1305 one-time message authentication code as specified in https://cr.yp.to/mac/poly1305-20050329.pdf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/pbkdf2" data-module="golang.org/x/crypto" data-loc="30" data-importedbys="2" data-depheight="18" data-depdepth="3"><code>     <span class="order">189</span>. <a href="pkg/golang.org/x/crypto/pbkdf2.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/pbkdf2.html">/pbkdf2</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/pbkdf2.html#imported-by">2</a>)</i><i class="codelines"> (30)</i><i class="depheight"> (18)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/crypto/sha3" data-module="golang.org/x/crypto" data-loc="893" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">190</span>. <a href="pkg/golang.org/x/crypto/sha3.html" class="path-duplicate">golang.org/x/crypto</a><a href="pkg/golang.org/x/crypto/sha3.html">/sha3</a><i class="importedbys"> (<a href="dep/golang.org/x/crypto/sha3.html#imported-by">1</a>)</i><i class="codelines"> (893)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/net/internal/socks" data-module="golang.org/x/net" data-loc="485" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">191</span>. <a href="pkg/golang.org/x/net/internal/socks.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/net/internal/socks.html">/net/internal/socks</a><i class="importedbys"> (<a href="dep/golang.org/x/net/internal/socks.html#imported-by">1</a>)</i><i class="codelines"> (485)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a SOCKS version 5 client implementation.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/net/proxy" data-module="golang.org/x/net" data-loc="429" data-importedbys="1" data-depheight="16" data-depdepth="1"><code>     <span class="order">192</span>. <a href="pkg/golang.org/x/net/proxy.html" class="path-duplicate">golang.org/x/net</a><a href="pkg/golang.org/x/net/proxy.html">/proxy</a><i class="importedbys"> (<a href="dep/golang.org/x/net/proxy.html#imported-by">1</a>)</i><i class="codelines"> (429)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides support for a variety of protocols to proxy network data.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sync/errgroup" data-module="golang.org/x/sync" data-loc="151" data-importedbys="1" data-depheight="15" data-depdepth="2"><code>     <span class="order">193</span>. <a href="pkg/golang.org/x/sync/errgroup.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/sync/errgroup.html">/sync/errgroup</a><i class="importedbys"> (<a href="dep/golang.org/x/sync/errgroup.html#imported-by">1</a>)</i><i class="codelines"> (151)</i><i class="depheight"> (15)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides synchronization, error propagation, and Context cancellation for groups of goroutines working on subtasks of a common task.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sync/singleflight" data-module="golang.org/x/sync" data-loc="214" data-importedbys="2" data-depheight="16" data-depdepth="1"><code>     <span class="order">194</span>. <a href="pkg/golang.org/x/sync/singleflight.html" class="path-duplicate">golang.org/x/sync</a><a href="pkg/golang.org/x/sync/singleflight.html">/singleflight</a><i class="importedbys"> (<a href="dep/golang.org/x/sync/singleflight.html#imported-by">2</a>)</i><i class="codelines"> (214)</i><i class="depheight"> (16)</i><i class="depdepth"> (1)</i><span class="pkg-summary"> - provides a duplicate function call suppression mechanism.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-golang.org/x/sys/cpu" data-module="golang.org/x/sys" data-loc="850" data-importedbys="6" data-depheight="14" data-depdepth="4"><code>     <span class="order">195</span>. <a href="pkg/golang.org/x/sys/cpu.html" class="path-duplicate">golang.org/x</a><a href="pkg/golang.org/x/sys/cpu.html">/sys/cpu</a><i class="importedbys"> (<a href="dep/golang.org/x/sys/cpu.html#imported-by">6</a>)</i><i class="codelines"> (850)</i><i class="depheight"> (14)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements processor feature detection for various CPU architectures.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash" data-module="" data-loc="92" data-importedbys="36" data-depheight="9" data-depdepth="3"><code>     <span class="order">196</span>. <a href="pkg/hash.html">hash</a><i class="importedbys"> (<a href="dep/hash.html#imported-by">36</a>)</i><i class="codelines"> (92)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides interfaces for hash functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash/adler32" data-module="" data-loc="129" data-importedbys="1" data-depheight="10" data-depdepth="7"><code>     <span class="order">197</span>. <a href="pkg/hash/adler32.html" class="path-duplicate">hash</a><a href="pkg/hash/adler32.html">/adler32</a><i class="importedbys"> (<a href="dep/hash/adler32.html#imported-by">1</a>)</i><i class="codelines"> (129)</i><i class="depheight"> (10)</i><i class="depdepth"> (7)</i><span class="pkg-summary"> - implements the Adler-32 checksum.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-hash/crc32" data-module="" data-loc="586" data-importedbys="7" data-depheight="10" data-depdepth="4"><code>     <span class="order">198</span>. <a href="pkg/hash/crc32.html" class="path-duplicate">hash</a><a href="pkg/hash/crc32.html">/crc32</a><i class="importedbys"> (<a href="dep/hash/crc32.html#imported-by">7</a>)</i><i class="codelines"> (586)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements the 32-bit cyclic redundancy check, or CRC-32, checksum.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-image" data-module="" data-loc="2102" data-importedbys="2" data-depheight="11" data-depdepth="3"><code>     <span class="order">199</span>. <a href="pkg/image.html">image</a><i class="importedbys"> (<a href="dep/image.html#imported-by">2</a>)</i><i class="codelines"> (2102)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a basic 2-D image library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-image/color" data-module="" data-loc="720" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">200</span>. <a href="pkg/image/color.html" class="path-duplicate">image</a><a href="pkg/image/color.html">/color</a><i class="importedbys"> (<a href="dep/image/color.html#imported-by">2</a>)</i><i class="codelines"> (720)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a basic color library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/abi" data-module="" data-loc="1501" data-importedbys="10" data-depheight="2" data-depdepth="3"><code>     <span class="order">201</span>. <a href="pkg/internal/abi.html">internal/abi</a><i class="importedbys"> (<a href="dep/internal/abi.html#imported-by">10</a>)</i><i class="codelines"> (1501)</i><i class="depheight"> (2)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/asan" data-module="" data-loc="27" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">202</span>. <a href="pkg/internal/asan.html" class="path-duplicate">internal</a><a href="pkg/internal/asan.html">/asan</a><i class="importedbys"> (<a href="dep/internal/asan.html#imported-by">2</a>)</i><i class="codelines"> (27)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the address sanitizer.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/bisect" data-module="" data-loc="778" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">203</span>. <a href="pkg/internal/bisect.html" class="path-duplicate">internal</a><a href="pkg/internal/bisect.html">/bisect</a><i class="importedbys"> (<a href="dep/internal/bisect.html#imported-by">1</a>)</i><i class="codelines"> (778)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - can be used by compilers and other programs to serve as a target for the bisect debugging tool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/bytealg" data-module="" data-loc="299" data-importedbys="17" data-depheight="3" data-depdepth="3"><code>     <span class="order">204</span>. <a href="pkg/internal/bytealg.html" class="path-duplicate">internal</a><a href="pkg/internal/bytealg.html">/bytealg</a><i class="importedbys"> (<a href="dep/internal/bytealg.html#imported-by">17</a>)</i><i class="codelines"> (299)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/byteorder" data-module="" data-loc="149" data-importedbys="17" data-depheight="1" data-depdepth="3"><code>     <span class="order">205</span>. <a href="pkg/internal/byteorder.html" class="path-duplicate">internal</a><a href="pkg/internal/byteorder.html">/byteorder</a><i class="importedbys"> (<a href="dep/internal/byteorder.html#imported-by">17</a>)</i><i class="codelines"> (149)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides functions for decoding and encoding little and big endian integer types from/to byte slices.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/chacha8rand" data-module="" data-loc="405" data-importedbys="2" data-depheight="3" data-depdepth="4"><code>     <span class="order">206</span>. <a href="pkg/internal/chacha8rand.html" class="path-duplicate">internal</a><a href="pkg/internal/chacha8rand.html">/chacha8rand</a><i class="importedbys"> (<a href="dep/internal/chacha8rand.html#imported-by">2</a>)</i><i class="codelines"> (405)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a pseudorandom generator based on ChaCha8.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/coverage/rtcov" data-module="" data-loc="88" data-importedbys="1" data-depheight="2" data-depdepth="4"><code>     <span class="order">207</span>. <a href="pkg/internal/coverage/rtcov.html" class="path-duplicate">internal</a><a href="pkg/internal/coverage/rtcov.html">/coverage/rtcov</a><i class="importedbys"> (<a href="dep/internal/coverage/rtcov.html#imported-by">1</a>)</i><i class="codelines"> (88)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/cpu" data-module="" data-loc="692" data-importedbys="10" data-depheight="2" data-depdepth="4"><code>     <span class="order">208</span>. <a href="pkg/internal/cpu.html" class="path-duplicate">internal</a><a href="pkg/internal/cpu.html">/cpu</a><i class="importedbys"> (<a href="dep/internal/cpu.html#imported-by">10</a>)</i><i class="codelines"> (692)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements processor feature detection used by the Go standard library.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/filepathlite" data-module="" data-loc="326" data-importedbys="2" data-depheight="12" data-depdepth="3"><code>     <span class="order">209</span>. <a href="pkg/internal/filepathlite.html" class="path-duplicate">internal</a><a href="pkg/internal/filepathlite.html">/filepathlite</a><i class="importedbys"> (<a href="dep/internal/filepathlite.html#imported-by">2</a>)</i><i class="codelines"> (326)</i><i class="depheight"> (12)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of path/filepath, only using packages which may be imported by "os".</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/fmtsort" data-module="" data-loc="154" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order">210</span>. <a href="pkg/internal/fmtsort.html" class="path-duplicate">internal</a><a href="pkg/internal/fmtsort.html">/fmtsort</a><i class="importedbys"> (<a href="dep/internal/fmtsort.html#imported-by">1</a>)</i><i class="codelines"> (154)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a general stable ordering mechanism for maps, on behalf of the fmt and text/template packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goarch" data-module="" data-loc="110" data-importedbys="17" data-depheight="1" data-depdepth="3"><code>     <span class="order">211</span>. <a href="pkg/internal/goarch.html" class="path-duplicate">internal</a><a href="pkg/internal/goarch.html">/goarch</a><i class="importedbys"> (<a href="dep/internal/goarch.html#imported-by">17</a>)</i><i class="codelines"> (110)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - package goarch contains GOARCH-specific constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/godebug" data-module="" data-loc="316" data-importedbys="13" data-depheight="8" data-depdepth="3"><code>     <span class="order">212</span>. <a href="pkg/internal/godebug.html" class="path-duplicate">internal</a><a href="pkg/internal/godebug.html">/godebug</a><i class="importedbys"> (<a href="dep/internal/godebug.html#imported-by">13</a>)</i><i class="codelines"> (316)</i><i class="depheight"> (8)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - makes the settings in the $GODEBUG environment variable available to other packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/godebugs" data-module="" data-loc="116" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">213</span>. <a href="pkg/internal/godebugs.html" class="path-duplicate">internal</a><a href="pkg/internal/godebugs.html">/godebugs</a><i class="importedbys"> (<a href="dep/internal/godebugs.html#imported-by">2</a>)</i><i class="codelines"> (116)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a table of known GODEBUG settings, for use by a variety of other packages, including internal/godebug, runtime, runtime/metrics, and cmd/go/internal/load.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goexperiment" data-module="" data-loc="291" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">214</span>. <a href="pkg/internal/goexperiment.html" class="path-duplicate">internal</a><a href="pkg/internal/goexperiment.html">/goexperiment</a><i class="importedbys"> (<a href="dep/internal/goexperiment.html#imported-by">1</a>)</i><i class="codelines"> (291)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements support for toolchain experiments.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/goos" data-module="" data-loc="41" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">215</span>. <a href="pkg/internal/goos.html" class="path-duplicate">internal</a><a href="pkg/internal/goos.html">/goos</a><i class="importedbys"> (<a href="dep/internal/goos.html#imported-by">3</a>)</i><i class="codelines"> (41)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - package goos contains GOOS-specific constants.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/msan" data-module="" data-loc="37" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">216</span>. <a href="pkg/internal/msan.html" class="path-duplicate">internal</a><a href="pkg/internal/msan.html">/msan</a><i class="importedbys"> (<a href="dep/internal/msan.html#imported-by">2</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the memory sanitizer.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/nettrace" data-module="" data-loc="46" data-importedbys="2" data-depheight="1" data-depdepth="4"><code>     <span class="order">217</span>. <a href="pkg/internal/nettrace.html" class="path-duplicate">internal</a><a href="pkg/internal/nettrace.html">/nettrace</a><i class="importedbys"> (<a href="dep/internal/nettrace.html#imported-by">2</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains internal hooks for tracing activity in the net package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/oserror" data-module="" data-loc="18" data-importedbys="2" data-depheight="8" data-depdepth="4"><code>     <span class="order">218</span>. <a href="pkg/internal/oserror.html" class="path-duplicate">internal</a><a href="pkg/internal/oserror.html">/oserror</a><i class="importedbys"> (<a href="dep/internal/oserror.html#imported-by">2</a>)</i><i class="codelines"> (18)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines errors values used in the os package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/poll" data-module="" data-loc="2390" data-importedbys="3" data-depheight="11" data-depdepth="3"><code>     <span class="order">219</span>. <a href="pkg/internal/poll.html" class="path-duplicate">internal</a><a href="pkg/internal/poll.html">/poll</a><i class="importedbys"> (<a href="dep/internal/poll.html#imported-by">3</a>)</i><i class="codelines"> (2390)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - supports non-blocking I/O on file descriptors with polling.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/profilerecord" data-module="" data-loc="28" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">220</span>. <a href="pkg/internal/profilerecord.html" class="path-duplicate">internal</a><a href="pkg/internal/profilerecord.html">/profilerecord</a><i class="importedbys"> (<a href="dep/internal/profilerecord.html#imported-by">1</a>)</i><i class="codelines"> (28)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - holds internal types used to represent profiling records with deep stack traces.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/race" data-module="" data-loc="66" data-importedbys="6" data-depheight="3" data-depdepth="3"><code>     <span class="order">221</span>. <a href="pkg/internal/race.html" class="path-duplicate">internal</a><a href="pkg/internal/race.html">/race</a><i class="importedbys"> (<a href="dep/internal/race.html#imported-by">6</a>)</i><i class="codelines"> (66)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains helper functions for manually instrumenting code for the race detector.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/reflectlite" data-module="" data-loc="1201" data-importedbys="3" data-depheight="6" data-depdepth="3"><code>     <span class="order">222</span>. <a href="pkg/internal/reflectlite.html" class="path-duplicate">internal</a><a href="pkg/internal/reflectlite.html">/reflectlite</a><i class="importedbys"> (<a href="dep/internal/reflectlite.html#imported-by">3</a>)</i><i class="codelines"> (1201)</i><i class="depheight"> (6)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements lightweight version of reflect, not using any package except for "runtime", "unsafe", and "internal/abi"</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/atomic" data-module="" data-loc="876" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">223</span>. <a href="pkg/internal/runtime/atomic.html" class="path-duplicate">internal</a><a href="pkg/internal/runtime/atomic.html">/runtime/atomic</a><i class="importedbys"> (<a href="dep/internal/runtime/atomic.html#imported-by">2</a>)</i><i class="codelines"> (876)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides atomic operations, independent of sync/atomic, to the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/cgroup" data-module="" data-loc="975" data-importedbys="1" data-depheight="4" data-depdepth="4"><code>     <span class="order">224</span>. <a href="pkg/internal/runtime/cgroup.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/cgroup.html">/cgroup</a><i class="importedbys"> (<a href="dep/internal/runtime/cgroup.html#imported-by">1</a>)</i><i class="codelines"> (975)</i><i class="depheight"> (4)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/exithook" data-module="" data-loc="85" data-importedbys="1" data-depheight="3" data-depdepth="4"><code>     <span class="order">225</span>. <a href="pkg/internal/runtime/exithook.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/exithook.html">/exithook</a><i class="importedbys"> (<a href="dep/internal/runtime/exithook.html#imported-by">1</a>)</i><i class="codelines"> (85)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides limited support for on-exit cleanup.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/gc" data-module="" data-loc="168" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">226</span>. <a href="pkg/internal/runtime/gc.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/gc.html">/gc</a><i class="importedbys"> (<a href="dep/internal/runtime/gc.html#imported-by">2</a>)</i><i class="codelines"> (168)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/gc/scan" data-module="" data-loc="289" data-importedbys="1" data-depheight="3" data-depdepth="4"><code>     <span class="order">227</span>. <a href="pkg/internal/runtime/gc/scan.html" class="path-duplicate">internal/runtime/gc</a><a href="pkg/internal/runtime/gc/scan.html">/scan</a><i class="importedbys"> (<a href="dep/internal/runtime/gc/scan.html#imported-by">1</a>)</i><i class="codelines"> (289)</i><i class="depheight"> (3)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/maps" data-module="" data-loc="4482" data-importedbys="2" data-depheight="4" data-depdepth="4"><code>     <span class="order">228</span>. <a href="pkg/internal/runtime/maps.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/maps.html">/maps</a><i class="importedbys"> (<a href="dep/internal/runtime/maps.html#imported-by">2</a>)</i><i class="codelines"> (4482)</i><i class="depheight"> (4)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements Go's builtin map type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/math" data-module="" data-loc="62" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">229</span>. <a href="pkg/internal/runtime/math.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/math.html">/math</a><i class="importedbys"> (<a href="dep/internal/runtime/math.html#imported-by">2</a>)</i><i class="codelines"> (62)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/pprof/label" data-module="" data-loc="25" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">230</span>. <a href="pkg/internal/runtime/pprof/label.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/pprof/label.html">/pprof/label</a><i class="importedbys"> (<a href="dep/internal/runtime/pprof/label.html#imported-by">1</a>)</i><i class="codelines"> (25)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides common declarations used by both the runtime and runtime/pprof packages.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/sys" data-module="" data-loc="365" data-importedbys="6" data-depheight="2" data-depdepth="4"><code>     <span class="order">231</span>. <a href="pkg/internal/runtime/sys.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/sys.html">/sys</a><i class="importedbys"> (<a href="dep/internal/runtime/sys.html#imported-by">6</a>)</i><i class="codelines"> (365)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - package sys contains system- and configuration- and architecture-specific constants used by the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/runtime/syscall/linux" data-module="" data-loc="161" data-importedbys="3" data-depheight="2" data-depdepth="4"><code>     <span class="order">232</span>. <a href="pkg/internal/runtime/syscall/linux.html" class="path-duplicate">internal/runtime</a><a href="pkg/internal/runtime/syscall/linux.html">/syscall/linux</a><i class="importedbys"> (<a href="dep/internal/runtime/syscall/linux.html#imported-by">3</a>)</i><i class="codelines"> (161)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides the syscall primitives required for the runtime.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/saferio" data-module="" data-loc="132" data-importedbys="1" data-depheight="9" data-depdepth="5"><code>     <span class="order">233</span>. <a href="pkg/internal/saferio.html" class="path-duplicate">internal</a><a href="pkg/internal/saferio.html">/saferio</a><i class="importedbys"> (<a href="dep/internal/saferio.html#imported-by">1</a>)</i><i class="codelines"> (132)</i><i class="depheight"> (9)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides I/O functions that avoid allocating large amounts of memory unnecessarily.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/singleflight" data-module="" data-loc="123" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">234</span>. <a href="pkg/internal/singleflight.html" class="path-duplicate">internal</a><a href="pkg/internal/singleflight.html">/singleflight</a><i class="importedbys"> (<a href="dep/internal/singleflight.html#imported-by">1</a>)</i><i class="codelines"> (123)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a duplicate function call suppression mechanism.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/strconv" data-module="" data-loc="4036" data-importedbys="9" data-depheight="3" data-depdepth="3"><code>     <span class="order">235</span>. <a href="pkg/internal/strconv.html" class="path-duplicate">internal</a><a href="pkg/internal/strconv.html">/strconv</a><i class="importedbys"> (<a href="dep/internal/strconv.html#imported-by">9</a>)</i><i class="codelines"> (4036)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/stringslite" data-module="" data-loc="150" data-importedbys="10" data-depheight="4" data-depdepth="3"><code>     <span class="order">236</span>. <a href="pkg/internal/stringslite.html" class="path-duplicate">internal</a><a href="pkg/internal/stringslite.html">/stringslite</a><i class="importedbys"> (<a href="dep/internal/stringslite.html#imported-by">10</a>)</i><i class="codelines"> (150)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements a subset of strings, only using packages that may be imported by "os".</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/sync" data-module="" data-loc="1010" data-importedbys="2" data-depheight="4" data-depdepth="3"><code>     <span class="order">237</span>. <a href="pkg/internal/sync.html" class="path-duplicate">internal</a><a href="pkg/internal/sync.html">/sync</a><i class="importedbys"> (<a href="dep/internal/sync.html#imported-by">2</a>)</i><i class="codelines"> (1010)</i><i class="depheight"> (4)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic synchronization primitives such as mutual exclusion locks to internal packages (including ones that depend on sync).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/synctest" data-module="" data-loc="105" data-importedbys="1" data-depheight="3" data-depdepth="3"><code>     <span class="order">238</span>. <a href="pkg/internal/synctest.html" class="path-duplicate">internal</a><a href="pkg/internal/synctest.html">/synctest</a><i class="importedbys"> (<a href="dep/internal/synctest.html#imported-by">1</a>)</i><i class="codelines"> (105)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides support for testing concurrent code.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/syscall/execenv" data-module="" data-loc="19" data-importedbys="1" data-depheight="10" data-depdepth="3"><code>     <span class="order">239</span>. <a href="pkg/internal/syscall/execenv.html" class="path-duplicate">internal</a><a href="pkg/internal/syscall/execenv.html">/syscall/execenv</a><i class="importedbys"> (<a href="dep/internal/syscall/execenv.html#imported-by">1</a>)</i><i class="codelines"> (19)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/syscall/unix" data-module="" data-loc="777" data-importedbys="4" data-depheight="10" data-depdepth="3"><code>     <span class="order">240</span>. <a href="pkg/internal/syscall/unix.html" class="path-duplicate">internal/syscall</a><a href="pkg/internal/syscall/unix.html">/unix</a><i class="importedbys"> (<a href="dep/internal/syscall/unix.html#imported-by">4</a>)</i><i class="codelines"> (777)</i><i class="depheight"> (10)</i><i class="depdepth"> (3)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/testlog" data-module="" data-loc="113" data-importedbys="1" data-depheight="7" data-depdepth="3"><code>     <span class="order">241</span>. <a href="pkg/internal/testlog.html" class="path-duplicate">internal</a><a href="pkg/internal/testlog.html">/testlog</a><i class="importedbys"> (<a href="dep/internal/testlog.html#imported-by">1</a>)</i><i class="codelines"> (113)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a back-channel communication path between tests and package os, so that cmd/go can see which environment variables and files a test consults.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/trace/tracev2" data-module="" data-loc="707" data-importedbys="1" data-depheight="1" data-depdepth="4"><code>     <span class="order">242</span>. <a href="pkg/internal/trace/tracev2.html" class="path-duplicate">internal</a><a href="pkg/internal/trace/tracev2.html">/trace/tracev2</a><i class="importedbys"> (<a href="dep/internal/trace/tracev2.html#imported-by">1</a>)</i><i class="codelines"> (707)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains definitions for the v2 execution trace wire format.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-internal/unsafeheader" data-module="" data-loc="37" data-importedbys="2" data-depheight="2" data-depdepth="4"><code>     <span class="order">243</span>. <a href="pkg/internal/unsafeheader.html" class="path-duplicate">internal</a><a href="pkg/internal/unsafeheader.html">/unsafeheader</a><i class="importedbys"> (<a href="dep/internal/unsafeheader.html#imported-by">2</a>)</i><i class="codelines"> (37)</i><i class="depheight"> (2)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains header declarations for the Go runtime's slice and string implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-io" data-module="" data-loc="1089" data-importedbys="87" data-depheight="8" data-depdepth="2"><code>     <span class="order">244</span>. <a href="pkg/io.html">io</a><i class="importedbys"> (<a href="dep/io.html#imported-by">87</a>)</i><i class="codelines"> (1089)</i><i class="depheight"> (8)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides basic interfaces to I/O primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-io/fs" data-module="" data-loc="1003" data-importedbys="8" data-depheight="11" data-depdepth="3"><code>     <span class="order">245</span>. <a href="pkg/io/fs.html" class="path-duplicate">io</a><a href="pkg/io/fs.html">/fs</a><i class="importedbys"> (<a href="dep/io/fs.html#imported-by">8</a>)</i><i class="codelines"> (1003)</i><i class="depheight"> (11)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines basic interfaces to a file system.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-iter" data-module="" data-loc="473" data-importedbys="6" data-depheight="6" data-depdepth="3"><code>     <span class="order">246</span>. <a href="pkg/iter.html">iter</a><i class="importedbys"> (<a href="dep/iter.html#imported-by">6</a>)</i><i class="codelines"> (473)</i><i class="depheight"> (6)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic definitions and operations related to iterators over sequences.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-log" data-module="" data-loc="483" data-importedbys="6" data-depheight="15" data-depdepth="4"><code>     <span class="order">247</span>. <a href="pkg/log.html">log</a><i class="importedbys"> (<a href="dep/log.html#imported-by">6</a>)</i><i class="codelines"> (483)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements a simple logging package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-log/internal" data-module="" data-loc="12" data-importedbys="1" data-depheight="1" data-depdepth="5"><code>     <span class="order">248</span>. <a href="pkg/log/internal.html" class="path-duplicate">log</a><a href="pkg/log/internal.html">/internal</a><i class="importedbys"> (<a href="dep/log/internal.html#imported-by">1</a>)</i><i class="codelines"> (12)</i><i class="depheight"> (1)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains definitions used by both log and log/slog.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-maps" data-module="" data-loc="137" data-importedbys="4" data-depheight="7" data-depdepth="4"><code>     <span class="order">249</span>. <a href="pkg/maps.html">maps</a><i class="importedbys"> (<a href="dep/maps.html#imported-by">4</a>)</i><i class="codelines"> (137)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - defines various functions useful with maps of any type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math" data-module="" data-loc="6016" data-importedbys="36" data-depheight="3" data-depdepth="3"><code>     <span class="order">250</span>. <a href="pkg/math.html">math</a><i class="importedbys"> (<a href="dep/math.html#imported-by">36</a>)</i><i class="codelines"> (6016)</i><i class="depheight"> (3)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides basic constants and mathematical functions.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/big" data-module="" data-loc="9692" data-importedbys="18" data-depheight="15" data-depdepth="3"><code>     <span class="order">251</span>. <a href="pkg/math/big.html" class="path-duplicate">math</a><a href="pkg/math/big.html">/big</a><i class="importedbys"> (<a href="dep/math/big.html#imported-by">18</a>)</i><i class="codelines"> (9692)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements arbitrary-precision arithmetic (big numbers).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/bits" data-module="" data-loc="693" data-importedbys="49" data-depheight="2" data-depdepth="2"><code>     <span class="order">252</span>. <a href="pkg/math/bits.html" class="path-duplicate">math</a><a href="pkg/math/bits.html">/bits</a><i class="importedbys"> (<a href="dep/math/bits.html#imported-by">49</a>)</i><i class="codelines"> (693)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements bit counting and manipulation functions for the predeclared unsigned integer types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/rand" data-module="" data-loc="1265" data-importedbys="4" data-depheight="9" data-depdepth="3"><code>     <span class="order">253</span>. <a href="pkg/math/rand.html" class="path-duplicate">math</a><a href="pkg/math/rand.html">/rand</a><i class="importedbys"> (<a href="dep/math/rand.html#imported-by">4</a>)</i><i class="codelines"> (1265)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-math/rand/v2" data-module="" data-loc="1046" data-importedbys="2" data-depheight="8" data-depdepth="5"><code>     <span class="order">254</span>. <a href="pkg/math/rand/v2.html" class="path-duplicate">math/rand</a><a href="pkg/math/rand/v2.html">/v2</a><i class="importedbys"> (<a href="dep/math/rand/v2.html#imported-by">2</a>)</i><i class="codelines"> (1046)</i><i class="depheight"> (8)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime" data-module="" data-loc="1295" data-importedbys="2" data-depheight="15" data-depdepth="4"><code>     <span class="order">255</span>. <a href="pkg/mime.html">mime</a><i class="importedbys"> (<a href="dep/mime.html#imported-by">2</a>)</i><i class="codelines"> (1295)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements parts of the MIME spec.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime/multipart" data-module="" data-loc="1022" data-importedbys="1" data-depheight="21" data-depdepth="4"><code>     <span class="order">256</span>. <a href="pkg/mime/multipart.html" class="path-duplicate">mime</a><a href="pkg/mime/multipart.html">/multipart</a><i class="importedbys"> (<a href="dep/mime/multipart.html#imported-by">1</a>)</i><i class="codelines"> (1022)</i><i class="depheight"> (21)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements MIME multipart parsing, as defined in RFC 2046.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-mime/quotedprintable" data-module="" data-loc="312" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">257</span>. <a href="pkg/mime/quotedprintable.html" class="path-duplicate">mime</a><a href="pkg/mime/quotedprintable.html">/quotedprintable</a><i class="importedbys"> (<a href="dep/mime/quotedprintable.html#imported-by">1</a>)</i><i class="codelines"> (312)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements quoted-printable encoding as specified by RFC 2045.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net" data-module="" data-loc="12982" data-importedbys="19" data-depheight="14" data-depdepth="3"><code>     <span class="order">258</span>. <a href="pkg/net.html">net</a><i class="importedbys"> (<a href="dep/net.html#imported-by">19</a>)</i><i class="codelines"> (12982)</i><i class="depheight"> (14)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http" data-module="" data-loc="29689" data-importedbys="4" data-depheight="26" data-depdepth="3"><code>     <span class="order">259</span>. <a href="pkg/net/http.html" class="path-duplicate">net</a><a href="pkg/net/http.html">/http</a><i class="importedbys"> (<a href="dep/net/http.html#imported-by">4</a>)</i><i class="codelines"> (29689)</i><i class="depheight"> (26)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides HTTP client and server implementations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/httptrace" data-module="" data-loc="255" data-importedbys="2" data-depheight="24" data-depdepth="4"><code>     <span class="order">260</span>. <a href="pkg/net/http/httptrace.html" class="path-duplicate">net/http</a><a href="pkg/net/http/httptrace.html">/httptrace</a><i class="importedbys"> (<a href="dep/net/http/httptrace.html#imported-by">2</a>)</i><i class="codelines"> (255)</i><i class="depheight"> (24)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides mechanisms to trace the events within HTTP client requests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal" data-module="" data-loc="300" data-importedbys="1" data-depheight="15" data-depdepth="4"><code>     <span class="order">261</span>. <a href="pkg/net/http/internal.html" class="path-duplicate">net/http</a><a href="pkg/net/http/internal.html">/internal</a><i class="importedbys"> (<a href="dep/net/http/internal.html#imported-by">1</a>)</i><i class="codelines"> (300)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains HTTP internals shared by net/http and net/http/httputil.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal/ascii" data-module="" data-loc="61" data-importedbys="1" data-depheight="10" data-depdepth="4"><code>     <span class="order">262</span>. <a href="pkg/net/http/internal/ascii.html" class="path-duplicate">net/http/internal</a><a href="pkg/net/http/internal/ascii.html">/ascii</a><i class="importedbys"> (<a href="dep/net/http/internal/ascii.html#imported-by">1</a>)</i><i class="codelines"> (61)</i><i class="depheight"> (10)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/http/internal/httpcommon" data-module="" data-loc="618" data-importedbys="1" data-depheight="25" data-depdepth="4"><code>     <span class="order">263</span>. <a href="pkg/net/http/internal/httpcommon.html" class="path-duplicate">net/http/internal</a><a href="pkg/net/http/internal/httpcommon.html">/httpcommon</a><i class="importedbys"> (<a href="dep/net/http/internal/httpcommon.html#imported-by">1</a>)</i><i class="codelines"> (618)</i><i class="depheight"> (25)</i><i class="depdepth"> (4)</i></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/netip" data-module="" data-loc="1677" data-importedbys="5" data-depheight="9" data-depdepth="3"><code>     <span class="order">264</span>. <a href="pkg/net/netip.html" class="path-duplicate">net</a><a href="pkg/net/netip.html">/netip</a><i class="importedbys"> (<a href="dep/net/netip.html#imported-by">5</a>)</i><i class="codelines"> (1677)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines an IP address type that's a small value type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/textproto" data-module="" data-loc="1297" data-importedbys="6" data-depheight="15" data-depdepth="4"><code>     <span class="order">265</span>. <a href="pkg/net/textproto.html" class="path-duplicate">net</a><a href="pkg/net/textproto.html">/textproto</a><i class="importedbys"> (<a href="dep/net/textproto.html#imported-by">6</a>)</i><i class="codelines"> (1297)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements generic support for text-based request/response protocols in the style of HTTP, NNTP, and SMTP.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-net/url" data-module="" data-loc="1434" data-importedbys="7" data-depheight="15" data-depdepth="3"><code>     <span class="order">266</span>. <a href="pkg/net/url.html" class="path-duplicate">net</a><a href="pkg/net/url.html">/url</a><i class="importedbys"> (<a href="dep/net/url.html#imported-by">7</a>)</i><i class="codelines"> (1434)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - parses URLs and implements query escaping.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-os" data-module="" data-loc="6124" data-importedbys="22" data-depheight="13" data-depdepth="2"><code>     <span class="order">267</span>. <a href="pkg/os.html">os</a><i class="importedbys"> (<a href="dep/os.html#imported-by">22</a>)</i><i class="codelines"> (6124)</i><i class="depheight"> (13)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides a platform-independent interface to operating system functionality.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-path" data-module="" data-loc="444" data-importedbys="5" data-depheight="8" data-depdepth="4"><code>     <span class="order">268</span>. <a href="pkg/path.html">path</a><i class="importedbys"> (<a href="dep/path.html#imported-by">5</a>)</i><i class="codelines"> (444)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements utility routines for manipulating slash-separated paths.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-path/filepath" data-module="" data-loc="1039" data-importedbys="5" data-depheight="14" data-depdepth="2"><code>     <span class="order">269</span>. <a href="pkg/path/filepath.html" class="path-duplicate">path</a><a href="pkg/path/filepath.html">/filepath</a><i class="importedbys"> (<a href="dep/path/filepath.html#imported-by">5</a>)</i><i class="codelines"> (1039)</i><i class="depheight"> (14)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements utility routines for manipulating filename paths in a way compatible with the target operating system-defined file paths.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-reflect" data-module="" data-loc="8694" data-importedbys="15" data-depheight="9" data-depdepth="3"><code>     <span class="order">270</span>. <a href="pkg/reflect.html">reflect</a><i class="importedbys"> (<a href="dep/reflect.html#imported-by">15</a>)</i><i class="codelines"> (8694)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements run-time reflection, allowing a program to manipulate objects with arbitrary types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr" data-module="rsc.io/qr" data-loc="516" data-importedbys="1" data-depheight="16" data-depdepth="2"><code>     <span class="order">271</span>. <a href="pkg/rsc.io/qr.html">rsc.io/qr</a><i class="importedbys"> (<a href="dep/rsc.io/qr.html#imported-by">1</a>)</i><i class="codelines"> (516)</i><i class="depheight"> (16)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - encodes QR codes.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr/coding" data-module="rsc.io/qr" data-loc="815" data-importedbys="1" data-depheight="15" data-depdepth="3"><code>     <span class="order">272</span>. <a href="pkg/rsc.io/qr/coding.html" class="path-duplicate">rsc.io/qr</a><a href="pkg/rsc.io/qr/coding.html">/coding</a><i class="importedbys"> (<a href="dep/rsc.io/qr/coding.html#imported-by">1</a>)</i><i class="codelines"> (815)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements low-level QR coding details.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-rsc.io/qr/gf256" data-module="rsc.io/qr" data-loc="241" data-importedbys="1" data-depheight="9" data-depdepth="4"><code>     <span class="order">273</span>. <a href="pkg/rsc.io/qr/gf256.html" class="path-duplicate">rsc.io/qr</a><a href="pkg/rsc.io/qr/gf256.html">/gf256</a><i class="importedbys"> (<a href="dep/rsc.io/qr/gf256.html#imported-by">1</a>)</i><i class="codelines"> (241)</i><i class="depheight"> (9)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements arithmetic over the Galois Field GF(256).</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime" data-module="" data-loc="88411" data-importedbys="38" data-depheight="5" data-depdepth="3"><code>     <span class="order">274</span>. <a href="pkg/runtime.html">runtime</a><i class="importedbys"> (<a href="dep/runtime.html#imported-by">38</a>)</i><i class="codelines"> (88411)</i><i class="depheight"> (5)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains operations that interact with Go's runtime system, such as functions to control goroutines.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime/cgo" data-module="" data-loc="593" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">275</span>. <a href="pkg/runtime/cgo.html" class="path-duplicate">runtime</a><a href="pkg/runtime/cgo.html">/cgo</a><i class="importedbys"> (<a href="dep/runtime/cgo.html#imported-by">1</a>)</i><i class="codelines"> (593)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains runtime support for code generated by the cgo tool.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-runtime/debug" data-module="" data-loc="644" data-importedbys="3" data-depheight="15" data-depdepth="3"><code>     <span class="order">276</span>. <a href="pkg/runtime/debug.html" class="path-duplicate">runtime</a><a href="pkg/runtime/debug.html">/debug</a><i class="importedbys"> (<a href="dep/runtime/debug.html#imported-by">3</a>)</i><i class="codelines"> (644)</i><i class="depheight"> (15)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains facilities for programs to debug themselves while they are running.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-slices" data-module="" data-loc="1799" data-importedbys="32" data-depheight="7" data-depdepth="3"><code>     <span class="order">277</span>. <a href="pkg/slices.html">slices</a><i class="importedbys"> (<a href="dep/slices.html#imported-by">32</a>)</i><i class="codelines"> (1799)</i><i class="depheight"> (7)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - defines various functions useful with slices of any type.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sort" data-module="" data-loc="1404" data-importedbys="15" data-depheight="8" data-depdepth="3"><code>     <span class="order">278</span>. <a href="pkg/sort.html">sort</a><i class="importedbys"> (<a href="dep/sort.html#imported-by">15</a>)</i><i class="codelines"> (1404)</i><i class="depheight"> (8)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides primitives for sorting slices and user-defined collections.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-strconv" data-module="" data-loc="1689" data-importedbys="51" data-depheight="8" data-depdepth="2"><code>     <span class="order">279</span>. <a href="pkg/strconv.html">strconv</a><i class="importedbys"> (<a href="dep/strconv.html#imported-by">51</a>)</i><i class="codelines"> (1689)</i><i class="depheight"> (8)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements conversions to and from string representations of basic data types.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-strings" data-module="" data-loc="2435" data-importedbys="43" data-depheight="9" data-depdepth="2"><code>     <span class="order">280</span>. <a href="pkg/strings.html">strings</a><i class="importedbys"> (<a href="dep/strings.html#imported-by">43</a>)</i><i class="codelines"> (2435)</i><i class="depheight"> (9)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - implements simple functions to manipulate UTF-8 encoded strings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sync" data-module="" data-loc="1697" data-importedbys="77" data-depheight="6" data-depdepth="2"><code>     <span class="order">281</span>. <a href="pkg/sync.html">sync</a><i class="importedbys"> (<a href="dep/sync.html#imported-by">77</a>)</i><i class="codelines"> (1697)</i><i class="depheight"> (6)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides basic synchronization primitives such as mutual exclusion locks.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-sync/atomic" data-module="" data-loc="768" data-importedbys="38" data-depheight="2" data-depdepth="2"><code>     <span class="order">282</span>. <a href="pkg/sync/atomic.html" class="path-duplicate">sync</a><a href="pkg/sync/atomic.html">/atomic</a><i class="importedbys"> (<a href="dep/sync/atomic.html#imported-by">38</a>)</i><i class="codelines"> (768)</i><i class="depheight"> (2)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides low-level atomic memory primitives useful for implementing synchronization algorithms.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-syscall" data-module="" data-loc="8451" data-importedbys="9" data-depheight="9" data-depdepth="3"><code>     <span class="order">283</span>. <a href="pkg/syscall.html">syscall</a><i class="importedbys"> (<a href="dep/syscall.html#imported-by">9</a>)</i><i class="codelines"> (8451)</i><i class="depheight"> (9)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains an interface to the low-level operating system primitives.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-time" data-module="" data-loc="5623" data-importedbys="46" data-depheight="10" data-depdepth="2"><code>     <span class="order">284</span>. <a href="pkg/time.html">time</a><i class="importedbys"> (<a href="dep/time.html#imported-by">46</a>)</i><i class="codelines"> (5623)</i><i class="depheight"> (10)</i><i class="depdepth"> (2)</i><span class="pkg-summary"> - provides functionality for measuring and displaying time.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode" data-module="" data-loc="10330" data-importedbys="8" data-depheight="1" data-depdepth="3"><code>     <span class="order">285</span>. <a href="pkg/unicode.html">unicode</a><i class="importedbys"> (<a href="dep/unicode.html#imported-by">8</a>)</i><i class="codelines"> (10330)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - provides data and functions to test some properties of Unicode code points.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode/utf16" data-module="" data-loc="144" data-importedbys="4" data-depheight="1" data-depdepth="3"><code>     <span class="order">286</span>. <a href="pkg/unicode/utf16.html" class="path-duplicate">unicode</a><a href="pkg/unicode/utf16.html">/utf16</a><i class="importedbys"> (<a href="dep/unicode/utf16.html#imported-by">4</a>)</i><i class="codelines"> (144)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements encoding and decoding of UTF-16 sequences.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unicode/utf8" data-module="" data-loc="578" data-importedbys="25" data-depheight="1" data-depdepth="3"><code>     <span class="order">287</span>. <a href="pkg/unicode/utf8.html" class="path-duplicate">unicode</a><a href="pkg/unicode/utf8.html">/utf8</a><i class="importedbys"> (<a href="dep/unicode/utf8.html#imported-by">25</a>)</i><i class="codelines"> (578)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - implements functions and constants to support text encoded in UTF-8.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unique" data-module="" data-loc="552" data-importedbys="1" data-depheight="7" data-depdepth="4"><code>     <span class="order">288</span>. <a href="pkg/unique.html">unique</a><i class="importedbys"> (<a href="dep/unique.html#imported-by">1</a>)</i><i class="codelines"> (552)</i><i class="depheight"> (7)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - The unique package provides facilities for canonicalizing ("interning") comparable values.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-unsafe" data-module="" data-loc="271" data-importedbys="81" data-depheight="1" data-depdepth="3"><code>     <span class="order">289</span>. <a href="pkg/unsafe.html">unsafe</a><i class="importedbys"> (<a href="dep/unsafe.html#imported-by">81</a>)</i><i class="codelines"> (271)</i><i class="depheight"> (1)</i><i class="depdepth"> (3)</i><span class="pkg-summary"> - contains operations that step around the type safety of Go programs.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/chacha20" data-module="" data-loc="453" data-importedbys="1" data-depheight="18" data-depdepth="6"><code>     <span class="order">290</span>. <a href="pkg/vendor/golang.org/x/crypto/chacha20.html">vendor/golang.org/x/crypto/chacha20</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/chacha20.html#imported-by">1</a>)</i><i class="codelines"> (453)</i><i class="depheight"> (18)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/chacha20poly1305" data-module="" data-loc="380" data-importedbys="2" data-depheight="19" data-depdepth="5"><code>     <span class="order">291</span>. <a href="pkg/vendor/golang.org/x/crypto/chacha20poly1305.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/chacha20poly1305.html">/chacha20poly1305</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/chacha20poly1305.html#imported-by">2</a>)</i><i class="codelines"> (380)</i><i class="depheight"> (19)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/cryptobyte" data-module="" data-loc="1358" data-importedbys="3" data-depheight="17" data-depdepth="4"><code>     <span class="order">292</span>. <a href="pkg/vendor/golang.org/x/crypto/cryptobyte.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/cryptobyte.html">/cryptobyte</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/cryptobyte.html#imported-by">3</a>)</i><i class="codelines"> (1358)</i><i class="depheight"> (17)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/cryptobyte/asn1" data-module="" data-loc="46" data-importedbys="3" data-depheight="1" data-depdepth="4"><code>     <span class="order">293</span>. <a href="pkg/vendor/golang.org/x/crypto/cryptobyte/asn1.html" class="path-duplicate">vendor/golang.org/x/crypto/cryptobyte</a><a href="pkg/vendor/golang.org/x/crypto/cryptobyte/asn1.html">/asn1</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/cryptobyte/asn1.html#imported-by">3</a>)</i><i class="codelines"> (46)</i><i class="depheight"> (1)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/internal/alias" data-module="" data-loc="31" data-importedbys="2" data-depheight="2" data-depdepth="6"><code>     <span class="order">294</span>. <a href="pkg/vendor/golang.org/x/crypto/internal/alias.html" class="path-duplicate">vendor/golang.org/x/crypto</a><a href="pkg/vendor/golang.org/x/crypto/internal/alias.html">/internal/alias</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/internal/alias.html#imported-by">2</a>)</i><i class="codelines"> (31)</i><i class="depheight"> (2)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements memory aliasing tests.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/crypto/internal/poly1305" data-module="" data-loc="458" data-importedbys="1" data-depheight="11" data-depdepth="6"><code>     <span class="order">295</span>. <a href="pkg/vendor/golang.org/x/crypto/internal/poly1305.html" class="path-duplicate">vendor/golang.org/x/crypto/internal</a><a href="pkg/vendor/golang.org/x/crypto/internal/poly1305.html">/poly1305</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/crypto/internal/poly1305.html#imported-by">1</a>)</i><i class="codelines"> (458)</i><i class="depheight"> (11)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements Poly1305 one-time message authentication code as specified in https://cr.yp.to/mac/poly1305-20050329.pdf.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/dns/dnsmessage" data-module="" data-loc="3070" data-importedbys="1" data-depheight="8" data-depdepth="4"><code>     <span class="order">296</span>. <a href="pkg/vendor/golang.org/x/net/dns/dnsmessage.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/net/dns/dnsmessage.html">/net/dns/dnsmessage</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/dns/dnsmessage.html#imported-by">1</a>)</i><i class="codelines"> (3070)</i><i class="depheight"> (8)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides a mostly RFC 1035 compliant implementation of DNS message packing and unpacking.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http/httpguts" data-module="" data-loc="397" data-importedbys="2" data-depheight="19" data-depdepth="4"><code>     <span class="order">297</span>. <a href="pkg/vendor/golang.org/x/net/http/httpguts.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/http/httpguts.html">/http/httpguts</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http/httpguts.html#imported-by">2</a>)</i><i class="codelines"> (397)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides functions implementing various details of the HTTP specification.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http/httpproxy" data-module="" data-loc="373" data-importedbys="1" data-depheight="19" data-depdepth="4"><code>     <span class="order">298</span>. <a href="pkg/vendor/golang.org/x/net/http/httpproxy.html" class="path-duplicate">vendor/golang.org/x/net/http</a><a href="pkg/vendor/golang.org/x/net/http/httpproxy.html">/httpproxy</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http/httpproxy.html#imported-by">1</a>)</i><i class="codelines"> (373)</i><i class="depheight"> (19)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - provides support for HTTP proxy determination based on environment variables, as provided by net/http's ProxyFromEnvironment function.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/http2/hpack" data-module="" data-loc="1585" data-importedbys="2" data-depheight="15" data-depdepth="4"><code>     <span class="order">299</span>. <a href="pkg/vendor/golang.org/x/net/http2/hpack.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/http2/hpack.html">/http2/hpack</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/http2/hpack.html#imported-by">2</a>)</i><i class="codelines"> (1585)</i><i class="depheight"> (15)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements HPACK, a compression format for efficiently representing HTTP header fields in the context of HTTP/2.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/net/idna" data-module="" data-loc="6354" data-importedbys="3" data-depheight="18" data-depdepth="4"><code>     <span class="order">300</span>. <a href="pkg/vendor/golang.org/x/net/idna.html" class="path-duplicate">vendor/golang.org/x/net</a><a href="pkg/vendor/golang.org/x/net/idna.html">/idna</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/net/idna.html#imported-by">3</a>)</i><i class="codelines"> (6354)</i><i class="depheight"> (18)</i><i class="depdepth"> (4)</i><span class="pkg-summary"> - implements IDNA2008 using the compatibility processing defined by UTS (Unicode Technical Standard) #46, which defines a standard to deal with the transition from IDNA2003.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/sys/cpu" data-module="" data-loc="759" data-importedbys="1" data-depheight="14" data-depdepth="6"><code>     <span class="order">301</span>. <a href="pkg/vendor/golang.org/x/sys/cpu.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/sys/cpu.html">/sys/cpu</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/sys/cpu.html#imported-by">1</a>)</i><i class="codelines"> (759)</i><i class="depheight"> (14)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - implements processor feature detection for various CPU architectures.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/secure/bidirule" data-module="" data-loc="347" data-importedbys="1" data-depheight="17" data-depdepth="5"><code>     <span class="order">302</span>. <a href="pkg/vendor/golang.org/x/text/secure/bidirule.html" class="path-duplicate">vendor/golang.org/x</a><a href="pkg/vendor/golang.org/x/text/secure/bidirule.html">/text/secure/bidirule</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/secure/bidirule.html#imported-by">1</a>)</i><i class="codelines"> (347)</i><i class="depheight"> (17)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - implements the Bidi Rule defined by RFC 5893.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/transform" data-module="" data-loc="709" data-importedbys="2" data-depheight="10" data-depdepth="6"><code>     <span class="order">303</span>. <a href="pkg/vendor/golang.org/x/text/transform.html" class="path-duplicate">vendor/golang.org/x/text</a><a href="pkg/vendor/golang.org/x/text/transform.html">/transform</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/transform.html#imported-by">2</a>)</i><i class="codelines"> (709)</i><i class="depheight"> (10)</i><i class="depdepth"> (6)</i><span class="pkg-summary"> - provides reader and writer wrappers that transform the bytes passing through as well as various transformations.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/unicode/bidi" data-module="" data-loc="4052" data-importedbys="2" data-depheight="16" data-depdepth="5"><code>     <span class="order">304</span>. <a href="pkg/vendor/golang.org/x/text/unicode/bidi.html" class="path-duplicate">vendor/golang.org/x/text</a><a href="pkg/vendor/golang.org/x/text/unicode/bidi.html">/unicode/bidi</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/unicode/bidi.html#imported-by">2</a>)</i><i class="codelines"> (4052)</i><i class="depheight"> (16)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains functionality for bidirectional text support.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-vendor/golang.org/x/text/unicode/norm" data-module="" data-loc="10141" data-importedbys="1" data-depheight="15" data-depdepth="5"><code>     <span class="order">305</span>. <a href="pkg/vendor/golang.org/x/text/unicode/norm.html" class="path-duplicate">vendor/golang.org/x/text/unicode</a><a href="pkg/vendor/golang.org/x/text/unicode/norm.html">/norm</a><i class="importedbys"> (<a href="dep/vendor/golang.org/x/text/unicode/norm.html#imported-by">1</a>)</i><i class="codelines"> (10141)</i><i class="depheight"> (15)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - contains types and functions for normalizing Unicode strings.</span></code></div><i id="max-digit-count" class="hidden">3</i><div class="anchor pkg alphabet" id="pkg-weak" data-module="" data-loc="107" data-importedbys="4" data-depheight="6" data-depdepth="5"><code>     <span class="order">306</span>. <a href="pkg/weak.html">weak</a><i class="importedbys"> (<a href="dep/weak.html#imported-by">4</a>)</i><i class="codelines"> (107)</i><i class="depheight"> (6)</i><i class="depdepth"> (5)</i><span class="pkg-summary"> - provides ways to safely reference memory weakly, that is, without preventing its reclamation.</span></code></div></div></code></pre><pre id="footer">
 <table><tr><td><img src="png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
 <b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
diff --git a/pkg/crypto/x509.html b/pkg/crypto/x509.html
index 5dacb6ad51b..ea9e5ffeebb 100644
--- a/pkg/crypto/x509.html
+++ b/pkg/crypto/x509.html
@@ -198,7 +198,7 @@
 </div>
 <div id="exported-types"><span class="title">Package-Level Type Names<span class="title-stat"><i> (total 57, in which 21 are exported)</i></span></span>
 
-<div id="exported-types-buttons" class="js-on">	/* sort exporteds by: <label id="sort-types-by-alphabet" class="button">alphabet</label> | <label id="sort-types-by-popularity" class="button">popularity</label> */</div><div class="anchor type-res" id="name-Certificate" data-popularity="2925">	<input type='checkbox' class="fold" id="Certificate-fold-content"><label for="Certificate-fold-content"> <a href="../../use/crypto/x509..Certificate.html">type</a> <a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a> <i>(struct)</i></label><span id='Certificate-fold-content-docs' class="fold-docs">
+<div id="exported-types-buttons" class="js-on">	/* sort exporteds by: <label id="sort-types-by-alphabet" class="button">alphabet</label> | <label id="sort-types-by-popularity" class="button">popularity</label> */</div><div class="anchor type-res" id="name-Certificate" data-popularity="2960">	<input type='checkbox' class="fold" id="Certificate-fold-content"><label for="Certificate-fold-content"> <a href="../../use/crypto/x509..Certificate.html">type</a> <a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a> <i>(struct)</i></label><span id='Certificate-fold-content-docs' class="fold-docs">
 <span class="md-text">		A Certificate represents an X.509 certificate.</span>
 
 		<input type='checkbox' class="fold" id="Certificate-fold-fields"><label for="Certificate-fold-fields">Fields (<i>total 52, all are exported</i>)</label><span id='Certificate-fold-fields-items' class="fold-items"><span>
@@ -425,7 +425,7 @@
 				To generate a standards compliant CRL, use [CreateRevocationList] instead.</span>
 </span></span><span>
 			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/x509.go.html#line-913">Equal</a>(other *<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></span></span><span>
-			<input type='checkbox' class="fold" id="Certificate-fold-method-Verify"><label for="Certificate-fold-method-Verify">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-542">Verify</a>(opts <a href="#name-VerifyOptions">VerifyOptions</a>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</label><span id='Certificate-fold-method-Verify-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="Certificate-fold-method-Verify"><label for="Certificate-fold-method-Verify">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-544">Verify</a>(opts <a href="#name-VerifyOptions">VerifyOptions</a>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</label><span id='Certificate-fold-method-Verify-docs' class="fold-docs">
 <span class="md-text">				Verify attempts to verify c by building one or more chains from c to a
 				certificate in opts.Roots, using certificates in opts.Intermediates if
 				needed. If successful, it returns one or more chains where the first
@@ -459,7 +459,7 @@
 				
 				WARNING: this function doesn't do any revocation checking.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="Certificate-fold-method-VerifyHostname"><label for="Certificate-fold-method-VerifyHostname">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-936">VerifyHostname</a>(h <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-error">error</a></label><span id='Certificate-fold-method-VerifyHostname-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="Certificate-fold-method-VerifyHostname"><label for="Certificate-fold-method-VerifyHostname">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-941">VerifyHostname</a>(h <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-error">error</a></label><span id='Certificate-fold-method-VerifyHostname-docs' class="fold-docs">
 <span class="md-text">				VerifyHostname returns nil if c is a valid certificate for the named host.
 				Otherwise it returns an error describing the mismatch.
 				
@@ -471,11 +471,11 @@
 				Note that the legacy Common Name field is ignored.</span>
 </span></span>
 			<input type='checkbox' class="showhide" id="Certificate-showhide-methods"><i><label for="Certificate-showhide-methods" class="show-inline">/* 6 unexporteds ... */</label><label for="Certificate-showhide-methods" class="hide-inline">/* 6 unexporteds: */</label></i><span class="hidden"><i>
-			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-725">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-730">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</span></i></span><span class="hidden"><i>
 			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/x509.go.html#line-965">getSANExtension</a>() []<a href="../builtin.html#name-byte">byte</a></span></i></span><span class="hidden"><i>
 			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/x509.go.html#line-961">hasNameConstraints</a>() <a href="../builtin.html#name-bool">bool</a></span></i></span><span class="hidden"><i>
 			<span class="nodocs">(*Certificate) <a href="../../src/crypto/x509/x509.go.html#line-920">hasSANExtension</a>() <a href="../builtin.html#name-bool">bool</a></span></i></span><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="Certificate-fold-method-isValid"><label for="Certificate-fold-method-isValid">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-443">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<b>Certificate</b>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-error">error</a></label><span id='Certificate-fold-method-isValid-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="Certificate-fold-method-isValid"><label for="Certificate-fold-method-isValid">(*Certificate) <a href="../../src/crypto/x509/verify.go.html#line-445">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<b>Certificate</b>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-error">error</a></label><span id='Certificate-fold-method-isValid-docs' class="fold-docs">
 <span class="md-text">				isValid performs validity checks on c given that it is a candidate to append
 				to the chain in currentChain.</span>
 </span></i></span><span class="hidden"><i>
@@ -483,20 +483,20 @@
 		<input type='checkbox' class="fold" id="Certificate-fold-results"><label for="Certificate-fold-results">As Outputs Of (<i>at least 14, in which 5 are exported</i>)</label><span id='Certificate-fold-results-items' class="fold-items"><span>
 			func <a href="#name-ParseCertificate">ParseCertificate</a>(der []<a href="../builtin.html#name-byte">byte</a>) (*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</span><span>
 			func <a href="#name-ParseCertificates">ParseCertificates</a>(der []<a href="../builtin.html#name-byte">byte</a>) ([]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</span><span>
-			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-542">Verify</a>(opts <a href="#name-VerifyOptions">VerifyOptions</a>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</span><span>
+			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-544">Verify</a>(opts <a href="#name-VerifyOptions">VerifyOptions</a>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</span><span>
 			func github.com/refraction-networking/utls.(*<a href="../github.com/refraction-networking/utls.html#name-ClientSessionState">ClientSessionState</a>).<a href="../../src/github.com/refraction-networking/utls/u_public.go.html#line-735">ServerCertificates</a>() []*<b>Certificate</b></span><span>
 			func github.com/refraction-networking/utls.(*<a href="../github.com/refraction-networking/utls.html#name-ClientSessionState">ClientSessionState</a>).<a href="../../src/github.com/refraction-networking/utls/u_public.go.html#line-740">VerifiedChains</a>() [][]*<b>Certificate</b></span>
 			<input type='checkbox' class="showhide" id="Certificate-showhide-inputofs"><i><label for="Certificate-showhide-inputofs" class="show-inline">/* 9+ unexporteds ... */</label><label for="Certificate-showhide-inputofs" class="hide-inline">/* 9+ unexporteds: */</label></i><span class="hidden"><i>
 			func <a href="#name-appendToFreshChain">appendToFreshChain</a>(chain []*<b>Certificate</b>, cert *<b>Certificate</b>) []*<b>Certificate</b></i></span><span class="hidden"><i>
 			func <a href="#name-parseCertificate">parseCertificate</a>(der []<a href="../builtin.html#name-byte">byte</a>) (*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
-			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-725">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
+			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-730">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func (*Certificate).<a href="../../src/crypto/x509/root_unix.go.html#line-28">systemVerify</a>(opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func (*<a href="#name-CertPool">CertPool</a>).<a href="../../src/crypto/x509/cert_pool.go.html#line-81">cert</a>(n <a href="../builtin.html#name-int">int</a>) (*<b>Certificate</b>, func([]*<b>Certificate</b>) <a href="../builtin.html#name-error">error</a>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func crypto/tls.<a href="tls.html#name-fipsAllowedChains">fipsAllowedChains</a>(chains [][]*<b>Certificate</b>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func crypto/tls.(*<a href="tls.html#name-Certificate">Certificate</a>).<a href="../../src/crypto/tls/common.go.html#line-1639">leaf</a>() (*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func github.com/refraction-networking/utls.<a href="../github.com/refraction-networking/utls.html#name-fipsAllowedChains">fipsAllowedChains</a>(chains [][]*<b>Certificate</b>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func github.com/refraction-networking/utls.(*<a href="../github.com/refraction-networking/utls.html#name-Certificate">Certificate</a>).<a href="../../src/github.com/refraction-networking/utls/common.go.html#line-1626">leaf</a>() (*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span></span>
-		<input type='checkbox' class="fold" id="Certificate-fold-params"><label for="Certificate-fold-params">As Inputs Of (<i>at least 35, in which 11 are exported</i>)</label><span id='Certificate-fold-params-items' class="fold-items"><span>
+		<input type='checkbox' class="fold" id="Certificate-fold-params"><label for="Certificate-fold-params">As Inputs Of (<i>at least 36, in which 11 are exported</i>)</label><span id='Certificate-fold-params-items' class="fold-items"><span>
 			func <a href="#name-CreateCertificate">CreateCertificate</a>(rand <a href="../io.html">io</a>.<a href="../io.html#name-Reader">Reader</a>, template, parent *<b>Certificate</b>, pub, priv <a href="../builtin.html#name-any">any</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span><span>
 			func <a href="#name-CreateRevocationList">CreateRevocationList</a>(rand <a href="../io.html">io</a>.<a href="../io.html#name-Reader">Reader</a>, template *<a href="#name-RevocationList">RevocationList</a>, issuer *<b>Certificate</b>, priv <a href="../crypto.html">crypto</a>.<a href="../crypto.html#name-Signer">Signer</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span><span>
 			func (*Certificate).<a href="../../src/crypto/x509/x509.go.html#line-928">CheckSignatureFrom</a>(parent *<b>Certificate</b>) <a href="../builtin.html#name-error">error</a></span><span>
@@ -508,7 +508,7 @@
 			func github.com/refraction-networking/utls.<a href="../github.com/refraction-networking/utls.html#name-MakeClientSessionState">MakeClientSessionState</a>(SessionTicket []<a href="../builtin.html#name-uint8">uint8</a>, Vers <a href="../builtin.html#name-uint16">uint16</a>, CipherSuite <a href="../builtin.html#name-uint16">uint16</a>, MasterSecret []<a href="../builtin.html#name-byte">byte</a>, ServerCertificates []*<b>Certificate</b>, VerifiedChains [][]*<b>Certificate</b>) *<a href="../github.com/refraction-networking/utls.html">tls</a>.<a href="../github.com/refraction-networking/utls.html#name-ClientSessionState">ClientSessionState</a></span><span>
 			func github.com/refraction-networking/utls.(*<a href="../github.com/refraction-networking/utls.html#name-ClientSessionState">ClientSessionState</a>).<a href="../../src/github.com/refraction-networking/utls/u_public.go.html#line-783">SetServerCertificates</a>(ServerCertificates []*<b>Certificate</b>)</span><span>
 			func github.com/refraction-networking/utls.(*<a href="../github.com/refraction-networking/utls.html#name-ClientSessionState">ClientSessionState</a>).<a href="../../src/github.com/refraction-networking/utls/u_public.go.html#line-790">SetVerifiedChains</a>(VerifiedChains [][]*<b>Certificate</b>)</span>
-			<input type='checkbox' class="showhide" id="Certificate-showhide-outputofs"><i><label for="Certificate-showhide-outputofs" class="show-inline">/* 24+ unexporteds ... */</label><label for="Certificate-showhide-outputofs" class="hide-inline">/* 24+ unexporteds: */</label></i><span class="hidden"><i>
+			<input type='checkbox' class="showhide" id="Certificate-showhide-outputofs"><i><label for="Certificate-showhide-outputofs" class="show-inline">/* 25+ unexporteds ... */</label><label for="Certificate-showhide-outputofs" class="hide-inline">/* 25+ unexporteds: */</label></i><span class="hidden"><i>
 			func <a href="#name-alreadyInChain">alreadyInChain</a>(candidate *<b>Certificate</b>, chain []*<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func <a href="#name-alreadyInChain">alreadyInChain</a>(candidate *<b>Certificate</b>, chain []*<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func <a href="#name-appendToFreshChain">appendToFreshChain</a>(chain []*<b>Certificate</b>, cert *<b>Certificate</b>) []*<b>Certificate</b></i></span><span class="hidden"><i>
@@ -516,12 +516,13 @@
 			func <a href="#name-buildCertExtensions">buildCertExtensions</a>(template *<b>Certificate</b>, subjectIsEmpty <a href="../builtin.html#name-bool">bool</a>, authorityKeyId []<a href="../builtin.html#name-byte">byte</a>, subjectKeyId []<a href="../builtin.html#name-byte">byte</a>) (ret []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func <a href="#name-checkChainConstraints">checkChainConstraints</a>(chain []*<b>Certificate</b>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
 			func <a href="#name-checkChainForKeyUsage">checkChainForKeyUsage</a>(chain []*<b>Certificate</b>, keyUsages []<a href="#name-ExtKeyUsage">ExtKeyUsage</a>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
+			func <a href="#name-containsDistrustedSPKIHash">containsDistrustedSPKIHash</a>(chain []*<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func <a href="#name-parseNameConstraintsExtension">parseNameConstraintsExtension</a>(out *<b>Certificate</b>, e <a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>) (unhandled <a href="../builtin.html#name-bool">bool</a>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func <a href="#name-policiesValid">policiesValid</a>(chain []*<b>Certificate</b>, opts <a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func <a href="#name-processExtensions">processExtensions</a>(out *<b>Certificate</b>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
 			func <a href="#name-subjectBytes">subjectBytes</a>(cert *<b>Certificate</b>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
-			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-725">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
-			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-443">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<b>Certificate</b>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
+			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-730">buildChains</a>(currentChain []*<b>Certificate</b>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) (chains [][]*<b>Certificate</b>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
+			func (*Certificate).<a href="../../src/crypto/x509/verify.go.html#line-445">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<b>Certificate</b>, opts *<a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
 			func (*<a href="#name-CertPool">CertPool</a>).<a href="../../src/crypto/x509/cert_pool.go.html#line-172">contains</a>(cert *<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func (*<a href="#name-CertPool">CertPool</a>).<a href="../../src/crypto/x509/cert_pool.go.html#line-132">findPotentialParents</a>(cert *<b>Certificate</b>) []<a href="#name-potentialParent">potentialParent</a></i></span><span class="hidden"><i>
 			func crypto/tls.<a href="tls.html#name-anyValidVerifiedChain">anyValidVerifiedChain</a>(verifiedChains [][]*<b>Certificate</b>, opts <a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
@@ -534,16 +535,16 @@
 			func github.com/refraction-networking/utls.<a href="../github.com/refraction-networking/utls.html#name-fipsAllowChain">fipsAllowChain</a>(chain []*<b>Certificate</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
 			func github.com/refraction-networking/utls.<a href="../github.com/refraction-networking/utls.html#name-fipsAllowedChains">fipsAllowedChains</a>(chains [][]*<b>Certificate</b>) ([][]*<b>Certificate</b>, <a href="../builtin.html#name-error">error</a>)</i></span></span>
 
-</span></div><div class="anchor type-res" id="name-CertificateInvalidError" data-popularity="100">	<input type='checkbox' class="fold" id="CertificateInvalidError-fold-content"><label for="CertificateInvalidError-fold-content"> <a href="../../use/crypto/x509..CertificateInvalidError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a> <i>(struct)</i></label><span id='CertificateInvalidError-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-CertificateInvalidError" data-popularity="100">	<input type='checkbox' class="fold" id="CertificateInvalidError-fold-content"><label for="CertificateInvalidError-fold-content"> <a href="../../use/crypto/x509..CertificateInvalidError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a> <i>(struct)</i></label><span id='CertificateInvalidError-fold-content-docs' class="fold-docs">
 <span class="md-text">		CertificateInvalidError results when an odd error occurs. Users of this
 		library probably want to handle all these errors uniformly.</span>
 
 		<input type='checkbox' class="fold" id="CertificateInvalidError-fold-fields"><label for="CertificateInvalidError-fold-fields">Fields (<i>total 3, all are exported</i>)</label><span id='CertificateInvalidError-fold-fields-items' class="fold-items"><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-67">Cert</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-69">Detail</a> <i><a href="../builtin.html#name-string">string</a></i></span></span><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-68">Reason</a> <i><a href="#name-InvalidReason">InvalidReason</a></i></span></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-69">Cert</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span><span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-71">Detail</a> <i><a href="../builtin.html#name-string">string</a></i></span></span><span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-70">Reason</a> <i><a href="#name-InvalidReason">InvalidReason</a></i></span></span></span>
 		<input type='checkbox' class="fold" id="CertificateInvalidError-fold-methods"><label for="CertificateInvalidError-fold-methods">Methods (<i>only one, which is exported</i>)</label><span id='CertificateInvalidError-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( CertificateInvalidError) <a href="../../src/crypto/x509/verify.go.html#line-72">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
+			<span class="nodocs">( CertificateInvalidError) <a href="../../src/crypto/x509/verify.go.html#line-74">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
 		<input type='checkbox' class="fold" id="CertificateInvalidError-fold-impls"><label for="CertificateInvalidError-fold-impls">Implements (<i>at least one exported</i>)</label><span id='CertificateInvalidError-fold-impls-items' class="fold-items"><span>
 			 CertificateInvalidError : <a href="../builtin.html#name-error">error</a></span></span>
 
@@ -749,15 +750,15 @@
 			const <a href="#name-ExtKeyUsageServerAuth">ExtKeyUsageServerAuth</a></span><span>
 			const <a href="#name-ExtKeyUsageTimeStamping">ExtKeyUsageTimeStamping</a></span></span>
 
-</span></div><div class="anchor type-res" id="name-HostnameError" data-popularity="100">	<input type='checkbox' class="fold" id="HostnameError-fold-content"><label for="HostnameError-fold-content"> <a href="../../use/crypto/x509..HostnameError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a> <i>(struct)</i></label><span id='HostnameError-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-HostnameError" data-popularity="100">	<input type='checkbox' class="fold" id="HostnameError-fold-content"><label for="HostnameError-fold-content"> <a href="../../use/crypto/x509..HostnameError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a> <i>(struct)</i></label><span id='HostnameError-fold-content-docs' class="fold-docs">
 <span class="md-text">		HostnameError results when the set of authorized names doesn't match the
 		requested name.</span>
 
 		<input type='checkbox' class="fold" id="HostnameError-fold-fields"><label for="HostnameError-fold-fields">Fields (<i>total 2, both are exported</i>)</label><span id='HostnameError-fold-fields-items' class="fold-items"><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-105">Certificate</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-106">Host</a> <i><a href="../builtin.html#name-string">string</a></i></span></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-107">Certificate</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span><span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-108">Host</a> <i><a href="../builtin.html#name-string">string</a></i></span></span></span>
 		<input type='checkbox' class="fold" id="HostnameError-fold-methods"><label for="HostnameError-fold-methods">Methods (<i>only one, which is exported</i>)</label><span id='HostnameError-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( HostnameError) <a href="../../src/crypto/x509/verify.go.html#line-109">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
+			<span class="nodocs">( HostnameError) <a href="../../src/crypto/x509/verify.go.html#line-111">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
 		<input type='checkbox' class="fold" id="HostnameError-fold-impls"><label for="HostnameError-fold-impls">Implements (<i>at least one exported</i>)</label><span id='HostnameError-fold-impls-items' class="fold-items"><span>
 			 HostnameError : <a href="../builtin.html#name-error">error</a></span></span>
 
@@ -770,7 +771,7 @@
 		<input type='checkbox' class="fold" id="InsecureAlgorithmError-fold-impls"><label for="InsecureAlgorithmError-fold-impls">Implements (<i>at least one exported</i>)</label><span id='InsecureAlgorithmError-fold-impls-items' class="fold-items"><span>
 			 InsecureAlgorithmError : <a href="../builtin.html#name-error">error</a></span></span>
 
-</span></div><div class="anchor type-res" id="name-InvalidReason" data-popularity="15">	<input type='checkbox' class="fold" id="InvalidReason-fold-content"><label for="InvalidReason-fold-content"> <a href="../../use/crypto/x509..InvalidReason.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-23">InvalidReason</a> <a href="../builtin.html#name-int">int</a> <i>(basic type)</i></label><span id='InvalidReason-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-InvalidReason" data-popularity="15">	<input type='checkbox' class="fold" id="InvalidReason-fold-content"><label for="InvalidReason-fold-content"> <a href="../../use/crypto/x509..InvalidReason.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-25">InvalidReason</a> <a href="../builtin.html#name-int">int</a> <i>(basic type)</i></label><span id='InvalidReason-fold-content-docs' class="fold-docs">
 
 		<input type='checkbox' class="fold" id="InvalidReason-fold-values"><label for="InvalidReason-fold-values">As Types Of (<i>total 11, all are exported</i>)</label><span id='InvalidReason-fold-values-items' class="fold-items"><span>
 			const <a href="#name-CANotAuthorizedForExtKeyUsage">CANotAuthorizedForExtKeyUsage</a></span><span>
@@ -1090,14 +1091,14 @@
 			const <a href="#name-SHA512WithRSAPSS">SHA512WithRSAPSS</a></span><span>
 			const <a href="#name-UnknownSignatureAlgorithm">UnknownSignatureAlgorithm</a></span></span>
 
-</span></div><div class="anchor type-res" id="name-SystemRootsError" data-popularity="200">	<input type='checkbox' class="fold" id="SystemRootsError-fold-content"><label for="SystemRootsError-fold-content"> <a href="../../use/crypto/x509..SystemRootsError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a> <i>(struct)</i></label><span id='SystemRootsError-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-SystemRootsError" data-popularity="200">	<input type='checkbox' class="fold" id="SystemRootsError-fold-content"><label for="SystemRootsError-fold-content"> <a href="../../use/crypto/x509..SystemRootsError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a> <i>(struct)</i></label><span id='SystemRootsError-fold-content-docs' class="fold-docs">
 <span class="md-text">		SystemRootsError results when we fail to load the system root certificates.</span>
 
 		<input type='checkbox' class="fold" id="SystemRootsError-fold-fields"><label for="SystemRootsError-fold-fields">Fields (<i>only one, which is exported</i>)</label><span id='SystemRootsError-fold-fields-items' class="fold-items"><span>
 			<span class="nodocs"><a href="../../src/github.com/cenkalti/backoff/v4/retry.go.html#line-122">Err</a> <i><a href="../builtin.html#name-error">error</a></i></span></span></span>
 		<input type='checkbox' class="fold" id="SystemRootsError-fold-methods"><label for="SystemRootsError-fold-methods">Methods (<i>total 2, both are exported</i>)</label><span id='SystemRootsError-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( SystemRootsError) <a href="../../src/crypto/x509/verify.go.html#line-177">Error</a>() <a href="../builtin.html#name-string">string</a></span></span><span>
-			<span class="nodocs">( SystemRootsError) <a href="../../src/crypto/x509/verify.go.html#line-185">Unwrap</a>() <a href="../builtin.html#name-error">error</a></span></span></span>
+			<span class="nodocs">( SystemRootsError) <a href="../../src/crypto/x509/verify.go.html#line-179">Error</a>() <a href="../builtin.html#name-string">string</a></span></span><span>
+			<span class="nodocs">( SystemRootsError) <a href="../../src/crypto/x509/verify.go.html#line-187">Unwrap</a>() <a href="../builtin.html#name-error">error</a></span></span></span>
 		<input type='checkbox' class="fold" id="SystemRootsError-fold-impls"><label for="SystemRootsError-fold-impls">Implements (<i>at least 2, both are exported</i>)</label><span id='SystemRootsError-fold-impls-items' class="fold-items"><span>
 			 SystemRootsError : <a href="../builtin.html#name-error">error</a></span><span>
 			 SystemRootsError : github.com/go-faster/errors.<a href="../github.com/go-faster/errors.html#name-Wrapper">Wrapper</a></span></span>
@@ -1109,82 +1110,82 @@
 		<input type='checkbox' class="fold" id="UnhandledCriticalExtension-fold-impls"><label for="UnhandledCriticalExtension-fold-impls">Implements (<i>at least one exported</i>)</label><span id='UnhandledCriticalExtension-fold-impls-items' class="fold-items"><span>
 			 UnhandledCriticalExtension : <a href="../builtin.html#name-error">error</a></span></span>
 
-</span></div><div class="anchor type-res" id="name-UnknownAuthorityError" data-popularity="100">	<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-content"><label for="UnknownAuthorityError-fold-content"> <a href="../../use/crypto/x509..UnknownAuthorityError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a> <i>(struct)</i></label><span id='UnknownAuthorityError-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-UnknownAuthorityError" data-popularity="100">	<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-content"><label for="UnknownAuthorityError-fold-content"> <a href="../../use/crypto/x509..UnknownAuthorityError.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a> <i>(struct)</i></label><span id='UnknownAuthorityError-fold-content-docs' class="fold-docs">
 <span class="md-text">		UnknownAuthorityError results when the certificate issuer is unknown</span>
 
 		<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-fields"><label for="UnknownAuthorityError-fold-fields">Fields (<i>total 3, in which 1 is exported</i>)</label><span id='UnknownAuthorityError-fold-fields-items' class="fold-items"><span>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-147">Cert</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-149">Cert</a> <i>*<a href="#name-Certificate">Certificate</a></i></span></span>
 			<input type='checkbox' class="showhide" id="UnknownAuthorityError-showhide-fields"><i><label for="UnknownAuthorityError-showhide-fields" class="show-inline">/* 2 unexporteds ... */</label><label for="UnknownAuthorityError-showhide-fields" class="hide-inline">/* 2 unexporteds: */</label></i><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-field-hintCert"><label for="UnknownAuthorityError-fold-field-hintCert"><a href="../../src/crypto/x509/verify.go.html#line-153">hintCert</a> <i>*<a href="#name-Certificate">Certificate</a></i></label><span id='UnknownAuthorityError-fold-field-hintCert-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-field-hintCert"><label for="UnknownAuthorityError-fold-field-hintCert"><a href="../../src/crypto/x509/verify.go.html#line-155">hintCert</a> <i>*<a href="#name-Certificate">Certificate</a></i></label><span id='UnknownAuthorityError-fold-field-hintCert-docs' class="fold-docs">
 <span class="md-text">				hintCert contains a possible authority certificate that was rejected
 				because of the error in hintErr.</span>
 </span></i></span><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-field-hintErr"><label for="UnknownAuthorityError-fold-field-hintErr"><a href="../../src/crypto/x509/verify.go.html#line-150">hintErr</a> <i><a href="../builtin.html#name-error">error</a></i></label><span id='UnknownAuthorityError-fold-field-hintErr-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-field-hintErr"><label for="UnknownAuthorityError-fold-field-hintErr"><a href="../../src/crypto/x509/verify.go.html#line-152">hintErr</a> <i><a href="../builtin.html#name-error">error</a></i></label><span id='UnknownAuthorityError-fold-field-hintErr-docs' class="fold-docs">
 <span class="md-text">				hintErr contains an error that may be helpful in determining why an
 				authority wasn't found.</span>
 </span></i></span></span>
 		<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-methods"><label for="UnknownAuthorityError-fold-methods">Methods (<i>only one, which is exported</i>)</label><span id='UnknownAuthorityError-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( UnknownAuthorityError) <a href="../../src/crypto/x509/verify.go.html#line-156">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
+			<span class="nodocs">( UnknownAuthorityError) <a href="../../src/crypto/x509/verify.go.html#line-158">Error</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
 		<input type='checkbox' class="fold" id="UnknownAuthorityError-fold-impls"><label for="UnknownAuthorityError-fold-impls">Implements (<i>at least one exported</i>)</label><span id='UnknownAuthorityError-fold-impls-items' class="fold-items"><span>
 			 UnknownAuthorityError : <a href="../builtin.html#name-error">error</a></span></span>
 
-</span></div><div class="anchor type-res" id="name-VerifyOptions" data-popularity="210">	<input type='checkbox' class="fold" id="VerifyOptions-fold-content"><label for="VerifyOptions-fold-content"> <a href="../../use/crypto/x509..VerifyOptions.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a> <i>(struct)</i></label><span id='VerifyOptions-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res" id="name-VerifyOptions" data-popularity="210">	<input type='checkbox' class="fold" id="VerifyOptions-fold-content"><label for="VerifyOptions-fold-content"> <a href="../../use/crypto/x509..VerifyOptions.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a> <i>(struct)</i></label><span id='VerifyOptions-fold-content-docs' class="fold-docs">
 <span class="md-text">		VerifyOptions contains parameters for Certificate.Verify.</span>
 
 		<input type='checkbox' class="fold" id="VerifyOptions-fold-fields"><label for="VerifyOptions-fold-fields">Fields (<i>total 10, in which 7 are exported</i>)</label><span id='VerifyOptions-fold-fields-items' class="fold-items"><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-CertificatePolicies"><label for="VerifyOptions-fold-field-CertificatePolicies"><a href="../../src/crypto/x509/verify.go.html#line-224">CertificatePolicies</a> <i>[]<a href="#name-OID">OID</a></i></label><span id='VerifyOptions-fold-field-CertificatePolicies-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-CertificatePolicies"><label for="VerifyOptions-fold-field-CertificatePolicies"><a href="../../src/crypto/x509/verify.go.html#line-226">CertificatePolicies</a> <i>[]<a href="#name-OID">OID</a></i></label><span id='VerifyOptions-fold-field-CertificatePolicies-docs' class="fold-docs">
 <span class="md-text">				CertificatePolicies specifies which certificate policy OIDs are
 				acceptable during policy validation. An empty CertificatePolices
 				field implies any valid policy is acceptable.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-CurrentTime"><label for="VerifyOptions-fold-field-CurrentTime"><a href="../../src/crypto/x509/verify.go.html#line-207">CurrentTime</a> <i><a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a></i></label><span id='VerifyOptions-fold-field-CurrentTime-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-CurrentTime"><label for="VerifyOptions-fold-field-CurrentTime"><a href="../../src/crypto/x509/verify.go.html#line-209">CurrentTime</a> <i><a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a></i></label><span id='VerifyOptions-fold-field-CurrentTime-docs' class="fold-docs">
 <span class="md-text">				CurrentTime is used to check the validity of all certificates in the
 				chain. If zero, the current time is used.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-DNSName"><label for="VerifyOptions-fold-field-DNSName"><a href="../../src/crypto/x509/verify.go.html#line-195">DNSName</a> <i><a href="../builtin.html#name-string">string</a></i></label><span id='VerifyOptions-fold-field-DNSName-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-DNSName"><label for="VerifyOptions-fold-field-DNSName"><a href="../../src/crypto/x509/verify.go.html#line-197">DNSName</a> <i><a href="../builtin.html#name-string">string</a></i></label><span id='VerifyOptions-fold-field-DNSName-docs' class="fold-docs">
 <span class="md-text">				DNSName, if set, is checked against the leaf certificate with
 				Certificate.VerifyHostname or the platform verifier.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-Intermediates"><label for="VerifyOptions-fold-field-Intermediates"><a href="../../src/crypto/x509/verify.go.html#line-200">Intermediates</a> <i>*<a href="#name-CertPool">CertPool</a></i></label><span id='VerifyOptions-fold-field-Intermediates-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-Intermediates"><label for="VerifyOptions-fold-field-Intermediates"><a href="../../src/crypto/x509/verify.go.html#line-202">Intermediates</a> <i>*<a href="#name-CertPool">CertPool</a></i></label><span id='VerifyOptions-fold-field-Intermediates-docs' class="fold-docs">
 <span class="md-text">				Intermediates is an optional pool of certificates that are not trust
 				anchors, but can be used to form a chain from the leaf certificate to a
 				root certificate.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-KeyUsages"><label for="VerifyOptions-fold-field-KeyUsages"><a href="../../src/crypto/x509/verify.go.html#line-212">KeyUsages</a> <i>[]<a href="#name-ExtKeyUsage">ExtKeyUsage</a></i></label><span id='VerifyOptions-fold-field-KeyUsages-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-KeyUsages"><label for="VerifyOptions-fold-field-KeyUsages"><a href="../../src/crypto/x509/verify.go.html#line-214">KeyUsages</a> <i>[]<a href="#name-ExtKeyUsage">ExtKeyUsage</a></i></label><span id='VerifyOptions-fold-field-KeyUsages-docs' class="fold-docs">
 <span class="md-text">				KeyUsages specifies which Extended Key Usage values are acceptable. A
 				chain is accepted if it allows any of the listed values. An empty list
 				means ExtKeyUsageServerAuth. To accept any key usage, include ExtKeyUsageAny.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-MaxConstraintComparisions"><label for="VerifyOptions-fold-field-MaxConstraintComparisions"><a href="../../src/crypto/x509/verify.go.html#line-219">MaxConstraintComparisions</a> <i><a href="../builtin.html#name-int">int</a></i></label><span id='VerifyOptions-fold-field-MaxConstraintComparisions-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-MaxConstraintComparisions"><label for="VerifyOptions-fold-field-MaxConstraintComparisions"><a href="../../src/crypto/x509/verify.go.html#line-221">MaxConstraintComparisions</a> <i><a href="../builtin.html#name-int">int</a></i></label><span id='VerifyOptions-fold-field-MaxConstraintComparisions-docs' class="fold-docs">
 <span class="md-text">				MaxConstraintComparisions is the maximum number of comparisons to
 				perform when checking a given certificate's name constraints. If
 				zero, a sensible default is used. This limit prevents pathological
 				certificates from consuming excessive amounts of CPU time when
 				validating. It does not apply to the platform verifier.</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-Roots"><label for="VerifyOptions-fold-field-Roots"><a href="../../src/crypto/x509/verify.go.html#line-203">Roots</a> <i>*<a href="#name-CertPool">CertPool</a></i></label><span id='VerifyOptions-fold-field-Roots-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-Roots"><label for="VerifyOptions-fold-field-Roots"><a href="../../src/crypto/x509/verify.go.html#line-205">Roots</a> <i>*<a href="#name-CertPool">CertPool</a></i></label><span id='VerifyOptions-fold-field-Roots-docs' class="fold-docs">
 <span class="md-text">				Roots is the set of trusted root certificates the leaf certificate needs
 				to chain up to. If nil, the system roots or the platform verifier are used.</span>
 </span></span>
 			<input type='checkbox' class="showhide" id="VerifyOptions-showhide-fields"><i><label for="VerifyOptions-showhide-fields" class="show-inline">/* 3 unexporteds ... */</label><label for="VerifyOptions-showhide-fields" class="hide-inline">/* 3 unexporteds: */</label></i><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-inhibitAnyPolicy"><label for="VerifyOptions-fold-field-inhibitAnyPolicy"><a href="../../src/crypto/x509/verify.go.html#line-240">inhibitAnyPolicy</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-inhibitAnyPolicy-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-inhibitAnyPolicy"><label for="VerifyOptions-fold-field-inhibitAnyPolicy"><a href="../../src/crypto/x509/verify.go.html#line-242">inhibitAnyPolicy</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-inhibitAnyPolicy-docs' class="fold-docs">
 <span class="md-text">				inhibitAnyPolicy indicates if the anyPolicy policy should be
 				processed if present in a certificate being validated.</span>
 </span></i></span><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-inhibitPolicyMapping"><label for="VerifyOptions-fold-field-inhibitPolicyMapping"><a href="../../src/crypto/x509/verify.go.html#line-232">inhibitPolicyMapping</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-inhibitPolicyMapping-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-inhibitPolicyMapping"><label for="VerifyOptions-fold-field-inhibitPolicyMapping"><a href="../../src/crypto/x509/verify.go.html#line-234">inhibitPolicyMapping</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-inhibitPolicyMapping-docs' class="fold-docs">
 <span class="md-text">				inhibitPolicyMapping indicates if policy mapping should be allowed
 				during path validation.</span>
 </span></i></span><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-requireExplicitPolicy"><label for="VerifyOptions-fold-field-requireExplicitPolicy"><a href="../../src/crypto/x509/verify.go.html#line-236">requireExplicitPolicy</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-requireExplicitPolicy-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="VerifyOptions-fold-field-requireExplicitPolicy"><label for="VerifyOptions-fold-field-requireExplicitPolicy"><a href="../../src/crypto/x509/verify.go.html#line-238">requireExplicitPolicy</a> <i><a href="../builtin.html#name-bool">bool</a></i></label><span id='VerifyOptions-fold-field-requireExplicitPolicy-docs' class="fold-docs">
 <span class="md-text">				requireExplicitPolicy indidicates if explicit policies must be present
 				for each certificate being validated.</span>
 </span></i></span></span>
 		<input type='checkbox' class="fold" id="VerifyOptions-fold-params"><label for="VerifyOptions-fold-params">As Inputs Of (<i>at least 6, in which 1 is exported</i>)</label><span id='VerifyOptions-fold-params-items' class="fold-items"><span>
-			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-542">Verify</a>(opts <b>VerifyOptions</b>) ([][]*<a href="#name-Certificate">Certificate</a>, <a href="../builtin.html#name-error">error</a>)</span>
+			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-544">Verify</a>(opts <b>VerifyOptions</b>) ([][]*<a href="#name-Certificate">Certificate</a>, <a href="../builtin.html#name-error">error</a>)</span>
 			<input type='checkbox' class="showhide" id="VerifyOptions-showhide-outputofs"><i><label for="VerifyOptions-showhide-outputofs" class="show-inline">/* 5+ unexporteds ... */</label><label for="VerifyOptions-showhide-outputofs" class="hide-inline">/* 5+ unexporteds: */</label></i><span class="hidden"><i>
 			func <a href="#name-policiesValid">policiesValid</a>(chain []*<a href="#name-Certificate">Certificate</a>, opts <b>VerifyOptions</b>) <a href="../builtin.html#name-bool">bool</a></i></span><span class="hidden"><i>
-			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-725">buildChains</a>(currentChain []*<a href="#name-Certificate">Certificate</a>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<b>VerifyOptions</b>) (chains [][]*<a href="#name-Certificate">Certificate</a>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
-			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-443">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<a href="#name-Certificate">Certificate</a>, opts *<b>VerifyOptions</b>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
+			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-730">buildChains</a>(currentChain []*<a href="#name-Certificate">Certificate</a>, sigChecks *<a href="../builtin.html#name-int">int</a>, opts *<b>VerifyOptions</b>) (chains [][]*<a href="#name-Certificate">Certificate</a>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
+			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/verify.go.html#line-445">isValid</a>(certType <a href="../builtin.html#name-int">int</a>, currentChain []*<a href="#name-Certificate">Certificate</a>, opts *<b>VerifyOptions</b>) <a href="../builtin.html#name-error">error</a></i></span><span class="hidden"><i>
 			func (*<a href="#name-Certificate">Certificate</a>).<a href="../../src/crypto/x509/root_unix.go.html#line-28">systemVerify</a>(opts *<b>VerifyOptions</b>) (chains [][]*<a href="#name-Certificate">Certificate</a>, err <a href="../builtin.html#name-error">error</a>)</i></span><span class="hidden"><i>
 			func crypto/tls.<a href="tls.html#name-anyValidVerifiedChain">anyValidVerifiedChain</a>(verifiedChains [][]*<a href="#name-Certificate">Certificate</a>, opts <b>VerifyOptions</b>) <a href="../builtin.html#name-bool">bool</a></i></span></span>
 
@@ -1476,39 +1477,39 @@
 			<span class="nodocs"><a href="../../src/crypto/x509/x509.go.html#line-60">Algo</a> <i><a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AlgorithmIdentifier">AlgorithmIdentifier</a></i></span></span><span>
 			<span class="nodocs"><a href="../../src/crypto/x509/x509.go.html#line-61">BitString</a> <i><a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-BitString">BitString</a></i></span></span></span>
 
-</span></div><div class="anchor type-res hidden" id="name-policyGraph" data-popularity="575">	<input type='checkbox' class="fold" id="policyGraph-fold-content"><label for="policyGraph-fold-content"> <a href="../../use/crypto/x509..policyGraph^f0ba7.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a> <i>(struct)</i></label><span id='policyGraph-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res hidden" id="name-policyGraph" data-popularity="575">	<input type='checkbox' class="fold" id="policyGraph-fold-content"><label for="policyGraph-fold-content"> <a href="../../use/crypto/x509..policyGraph^f0ba7.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a> <i>(struct)</i></label><span id='policyGraph-fold-content-docs' class="fold-docs">
 
 		<input type='checkbox' class="fold" id="policyGraph-fold-fields"><label for="policyGraph-fold-fields">Fields (<i>total 3, none are exported</i>)</label><span id='policyGraph-fold-fields-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="policyGraph-showhide-fields"><i><label for="policyGraph-showhide-fields" class="show-inline">/* 3 unexporteds ... */</label><label for="policyGraph-showhide-fields" class="hide-inline">/* 3 unexporteds: */</label></i><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1070">depth</a> <i><a href="../builtin.html#name-int">int</a></i></span></i></span><span class="hidden"><i>
-			<input type='checkbox' class="fold" id="policyGraph-fold-field-parentIndex"><label for="policyGraph-fold-field-parentIndex"><a href="../../src/crypto/x509/verify.go.html#line-1069">parentIndex</a> <i>map[<a href="../builtin.html#name-string">string</a>][]*<a href="#name-policyGraphNode">policyGraphNode</a></i></label><span id='policyGraph-fold-field-parentIndex-docs' class="fold-docs">
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1075">depth</a> <i><a href="../builtin.html#name-int">int</a></i></span></i></span><span class="hidden"><i>
+			<input type='checkbox' class="fold" id="policyGraph-fold-field-parentIndex"><label for="policyGraph-fold-field-parentIndex"><a href="../../src/crypto/x509/verify.go.html#line-1074">parentIndex</a> <i>map[<a href="../builtin.html#name-string">string</a>][]*<a href="#name-policyGraphNode">policyGraphNode</a></i></label><span id='policyGraph-fold-field-parentIndex-docs' class="fold-docs">
 <span class="md-text">				map of OID -&gt; nodes at strata[depth-1] with OID in their expectedPolicySet</span>
 </span></i></span><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1067">strata</a> <i>[]map[<a href="../builtin.html#name-string">string</a>]*<a href="#name-policyGraphNode">policyGraphNode</a></i></span></i></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1072">strata</a> <i>[]map[<a href="../builtin.html#name-string">string</a>]*<a href="#name-policyGraphNode">policyGraphNode</a></i></span></i></span></span>
 		<input type='checkbox' class="fold" id="policyGraph-fold-methods"><label for="policyGraph-fold-methods">Methods (<i>total 10, none are exported</i>)</label><span id='policyGraph-fold-methods-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="policyGraph-showhide-methods"><i><label for="policyGraph-showhide-methods" class="show-inline">/* 10 unexporteds ... */</label><label for="policyGraph-showhide-methods" class="hide-inline">/* 10 unexporteds: */</label></i><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1121">deleteLeaf</a>(policy <a href="#name-OID">OID</a>)</span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1168">incrDepth</a>()</span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1088">insert</a>(n *<a href="#name-policyGraphNode">policyGraphNode</a>)</span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1117">leafWithPolicy</a>(policy <a href="#name-OID">OID</a>) *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1113">leaves</a>() map[<a href="../builtin.html#name-string">string</a>]*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1099">parentWithAnyPolicy</a>() *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1106">parents</a>() <a href="../iter.html">iter</a>.<a href="../iter.html#name-Seq">Seq</a>[*<a href="#name-policyGraphNode">policyGraphNode</a>]</span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1092">parentsWithExpected</a>(expected <a href="#name-OID">OID</a>) []*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1155">prune</a>()</span></i></span><span class="hidden"><i>
-			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1135">validPolicyNodes</a>() []*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span></span>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1126">deleteLeaf</a>(policy <a href="#name-OID">OID</a>)</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1173">incrDepth</a>()</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1093">insert</a>(n *<a href="#name-policyGraphNode">policyGraphNode</a>)</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1122">leafWithPolicy</a>(policy <a href="#name-OID">OID</a>) *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1118">leaves</a>() map[<a href="../builtin.html#name-string">string</a>]*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1104">parentWithAnyPolicy</a>() *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1111">parents</a>() <a href="../iter.html">iter</a>.<a href="../iter.html#name-Seq">Seq</a>[*<a href="#name-policyGraphNode">policyGraphNode</a>]</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1097">parentsWithExpected</a>(expected <a href="#name-OID">OID</a>) []*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1160">prune</a>()</span></i></span><span class="hidden"><i>
+			<span class="nodocs">(*policyGraph) <a href="../../src/crypto/x509/verify.go.html#line-1140">validPolicyNodes</a>() []*<a href="#name-policyGraphNode">policyGraphNode</a></span></i></span></span>
 		<input type='checkbox' class="fold" id="policyGraph-fold-results"><label for="policyGraph-fold-results">As Outputs Of (<i>at least one unexported</i>)</label><span id='policyGraph-fold-results-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="policyGraph-showhide-inputofs"><i><label for="policyGraph-showhide-inputofs" class="show-inline">/* at least one unexported ... */</label><label for="policyGraph-showhide-inputofs" class="hide-inline">/* at least one unexported: */</label></i><span class="hidden"><i>
 			func <a href="#name-newPolicyGraph">newPolicyGraph</a>() *<b>policyGraph</b></i></span></span>
 
-</span></div><div class="anchor type-res hidden" id="name-policyGraphNode" data-popularity="110">	<input type='checkbox' class="fold" id="policyGraphNode-fold-content"><label for="policyGraphNode-fold-content"> <a href="../../use/crypto/x509..policyGraphNode^5c8b0.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a> <i>(struct)</i></label><span id='policyGraphNode-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res hidden" id="name-policyGraphNode" data-popularity="110">	<input type='checkbox' class="fold" id="policyGraphNode-fold-content"><label for="policyGraphNode-fold-content"> <a href="../../use/crypto/x509..policyGraphNode^5c8b0.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a> <i>(struct)</i></label><span id='policyGraphNode-fold-content-docs' class="fold-docs">
 
 		<input type='checkbox' class="fold" id="policyGraphNode-fold-fields"><label for="policyGraphNode-fold-fields">Fields (<i>total 4, none are exported</i>)</label><span id='policyGraphNode-fold-fields-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="policyGraphNode-showhide-fields"><i><label for="policyGraphNode-showhide-fields" class="show-inline">/* 4 unexporteds ... */</label><label for="policyGraphNode-showhide-fields" class="hide-inline">/* 4 unexporteds: */</label></i><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1049">children</a> <i>map[*<b>policyGraphNode</b>]<a href="../builtin.html#name-bool">bool</a></i></span></i></span><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1045">expectedPolicySet</a> <i>[]<a href="#name-OID">OID</a></i></span></i></span><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1048">parents</a> <i>map[*<b>policyGraphNode</b>]<a href="../builtin.html#name-bool">bool</a></i></span></i></span><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1044">validPolicy</a> <i><a href="#name-OID">OID</a></i></span></i></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1054">children</a> <i>map[*<b>policyGraphNode</b>]<a href="../builtin.html#name-bool">bool</a></i></span></i></span><span class="hidden"><i>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1050">expectedPolicySet</a> <i>[]<a href="#name-OID">OID</a></i></span></i></span><span class="hidden"><i>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1053">parents</a> <i>map[*<b>policyGraphNode</b>]<a href="../builtin.html#name-bool">bool</a></i></span></i></span><span class="hidden"><i>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-1049">validPolicy</a> <i><a href="#name-OID">OID</a></i></span></i></span></span>
 		<input type='checkbox' class="fold" id="policyGraphNode-fold-results"><label for="policyGraphNode-fold-results">As Outputs Of (<i>at least one unexported</i>)</label><span id='policyGraphNode-fold-results-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="policyGraphNode-showhide-inputofs"><i><label for="policyGraphNode-showhide-inputofs" class="show-inline">/* at least one unexported ... */</label><label for="policyGraphNode-showhide-inputofs" class="hide-inline">/* at least one unexported: */</label></i><span class="hidden"><i>
 			func <a href="#name-newPolicyGraphNode">newPolicyGraphNode</a>(valid <a href="#name-OID">OID</a>, parents []*<b>policyGraphNode</b>) *<b>policyGraphNode</b></i></span></span>
@@ -1578,17 +1579,17 @@
 			func <a href="#name-cipherByKey">cipherByKey</a>(key <a href="#name-PEMCipher">PEMCipher</a>) *<b>rfc1423Algo</b></i></span><span class="hidden"><i>
 			func <a href="#name-cipherByName">cipherByName</a>(name <a href="../builtin.html#name-string">string</a>) *<b>rfc1423Algo</b></i></span></span>
 
-</span></div><div class="anchor type-res hidden" id="name-rfc2821Mailbox" data-popularity="350">	<input type='checkbox' class="fold" id="rfc2821Mailbox-fold-content"><label for="rfc2821Mailbox-fold-content"> <a href="../../use/crypto/x509..rfc2821Mailbox^1cdc3.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a> <i>(struct)</i></label><span id='rfc2821Mailbox-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor type-res hidden" id="name-rfc2821Mailbox" data-popularity="350">	<input type='checkbox' class="fold" id="rfc2821Mailbox-fold-content"><label for="rfc2821Mailbox-fold-content"> <a href="../../use/crypto/x509..rfc2821Mailbox^1cdc3.html">type</a> <a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a> <i>(struct)</i></label><span id='rfc2821Mailbox-fold-content-docs' class="fold-docs">
 <span class="md-text">		rfc2821Mailbox represents a “mailbox” (which is an email address to most
 		people) by breaking it into the “local” (i.e. before the '@') and “domain”
 		parts.</span>
 
 		<input type='checkbox' class="fold" id="rfc2821Mailbox-fold-fields"><label for="rfc2821Mailbox-fold-fields">Fields (<i>total 2, neither is exported</i>)</label><span id='rfc2821Mailbox-fold-fields-items' class="fold-items">
 			<input type='checkbox' checked class="showhide" id="rfc2821Mailbox-showhide-fields"><i><label for="rfc2821Mailbox-showhide-fields" class="show-inline">/* 2 unexporteds ... */</label><label for="rfc2821Mailbox-showhide-fields" class="hide-inline">/* 2 unexporteds: */</label></i><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-253">domain</a> <i><a href="../builtin.html#name-string">string</a></i></span></i></span><span class="hidden"><i>
-			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-253">local</a> <i><a href="../builtin.html#name-string">string</a></i></span></i></span></span>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-255">domain</a> <i><a href="../builtin.html#name-string">string</a></i></span></i></span><span class="hidden"><i>
+			<span class="nodocs"><a href="../../src/crypto/x509/verify.go.html#line-255">local</a> <i><a href="../builtin.html#name-string">string</a></i></span></i></span></span>
 		<input type='checkbox' class="fold" id="rfc2821Mailbox-fold-methods"><label for="rfc2821Mailbox-fold-methods">Methods (<i>only one, which is exported</i>)</label><span id='rfc2821Mailbox-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( rfc2821Mailbox) <a href="../../src/crypto/x509/verify.go.html#line-256">String</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
+			<span class="nodocs">( rfc2821Mailbox) <a href="../../src/crypto/x509/verify.go.html#line-258">String</a>() <a href="../builtin.html#name-string">string</a></span></span></span>
 		<input type='checkbox' class="fold" id="rfc2821Mailbox-fold-impls"><label for="rfc2821Mailbox-fold-impls">Implements (<i>at least 3, in which 1 is exported</i>)</label><span id='rfc2821Mailbox-fold-impls-items' class="fold-items"><span>
 			 rfc2821Mailbox : fmt.<a href="../fmt.html#name-Stringer">Stringer</a></span>
 			<input type='checkbox' checked class="showhide" id="rfc2821Mailbox-showhide-impls"><i><label for="rfc2821Mailbox-showhide-impls" class="show-inline">/* 2+ unexporteds ... */</label><label for="rfc2821Mailbox-showhide-impls" class="hide-inline">/* 2+ unexporteds: */</label></i><span class="hidden"><i>
@@ -1648,7 +1649,7 @@
 			<span class="nodocs"><a href="../../src/crypto/x509/x509.go.html#line-199">NotBefore</a> <i><a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a></i></span></span></span>
 
 </span></div></div>
-<div id="exported-functions"><span class="title">Package-Level Functions<span class="title-stat"><i> (total 124, in which 28 are exported)</i></span></span>
+<div id="exported-functions"><span class="title">Package-Level Functions<span class="title-stat"><i> (total 125, in which 28 are exported)</i></span></span>
 
 <div class="anchor value-res" id="name-CreateCertificate">	<input type='checkbox' class="fold" id="CreateCertificate-fold-content"><label for="CreateCertificate-fold-content"> <a href="../../use/crypto/x509..CreateCertificate.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1679">CreateCertificate</a>(rand <a href="../io.html">io</a>.<a href="../io.html#name-Reader">Reader</a>, template, parent *<a href="#name-Certificate">Certificate</a>, pub, priv <a href="../builtin.html#name-any">any</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</label><span id='CreateCertificate-fold-content-docs' class="fold-docs">
 <span class="md-text">		CreateCertificate creates a new X.509 v3 certificate based on a template.
@@ -1939,19 +1940,19 @@
 		
 		New changes in the system cert pool might not be reflected in subsequent calls.</span>
 
-</span></div>	<input type='checkbox' class="showhide" id="unexported-functions-showhide"><i><label for="unexported-functions-showhide" class="show-inline">/* 96 unexporteds ... */</label><label for="unexported-functions-showhide" class="hide-inline">/* 96 unexporteds: */</label></i><div class="anchor value-res hidden" id="name-alreadyInChain"><i>	<input type='checkbox' class="fold" id="alreadyInChain-fold-content"><label for="alreadyInChain-fold-content"> <a href="../../use/crypto/x509..alreadyInChain^b3059.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-675">alreadyInChain</a>(candidate *<a href="#name-Certificate">Certificate</a>, chain []*<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='alreadyInChain-fold-content-docs' class="fold-docs">
+</span></div>	<input type='checkbox' class="showhide" id="unexported-functions-showhide"><i><label for="unexported-functions-showhide" class="show-inline">/* 97 unexporteds ... */</label><label for="unexported-functions-showhide" class="hide-inline">/* 97 unexporteds: */</label></i><div class="anchor value-res hidden" id="name-alreadyInChain"><i>	<input type='checkbox' class="fold" id="alreadyInChain-fold-content"><label for="alreadyInChain-fold-content"> <a href="../../use/crypto/x509..alreadyInChain^b3059.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-680">alreadyInChain</a>(candidate *<a href="#name-Certificate">Certificate</a>, chain []*<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='alreadyInChain-fold-content-docs' class="fold-docs">
 <span class="md-text">		alreadyInChain checks whether a candidate certificate is present in a chain.
 		Rather than doing a direct byte for byte equivalency check, we check if the
 		subject, public key, and SAN, if present, are equal. This prevents loops that
 		are created by mutual cross-signatures, or other cross-signature bridge
 		oddities.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-appendBase128BigInt"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendBase128BigInt^0e945.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-99">appendBase128BigInt</a>(dst []<a href="../builtin.html#name-byte">byte</a>, n *<a href="../math/big.html">big</a>.<a href="../math/big.html#name-Int">Int</a>) []<a href="../builtin.html#name-byte">byte</a></span></i></div><div class="anchor value-res hidden" id="name-appendBase128Int"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendBase128Int^f0732.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-80">appendBase128Int</a>(dst []<a href="../builtin.html#name-byte">byte</a>, n <a href="../builtin.html#name-uint64">uint64</a>) []<a href="../builtin.html#name-byte">byte</a></span></i></div><div class="anchor value-res hidden" id="name-appendToFreshChain"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendToFreshChain^6b596.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-663">appendToFreshChain</a>(chain []*<a href="#name-Certificate">Certificate</a>, cert *<a href="#name-Certificate">Certificate</a>) []*<a href="#name-Certificate">Certificate</a></span></i></div><div class="anchor value-res hidden" id="name-asn1BitLength"><i>	<input type='checkbox' class="fold" id="asn1BitLength-fold-content"><label for="asn1BitLength-fold-content"> <a href="../../use/crypto/x509..asn1BitLength^00f32.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1104">asn1BitLength</a>(bitString []<a href="../builtin.html#name-byte">byte</a>) <a href="../builtin.html#name-int">int</a></label><span id='asn1BitLength-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-appendBase128BigInt"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendBase128BigInt^0e945.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-99">appendBase128BigInt</a>(dst []<a href="../builtin.html#name-byte">byte</a>, n *<a href="../math/big.html">big</a>.<a href="../math/big.html#name-Int">Int</a>) []<a href="../builtin.html#name-byte">byte</a></span></i></div><div class="anchor value-res hidden" id="name-appendBase128Int"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendBase128Int^f0732.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-80">appendBase128Int</a>(dst []<a href="../builtin.html#name-byte">byte</a>, n <a href="../builtin.html#name-uint64">uint64</a>) []<a href="../builtin.html#name-byte">byte</a></span></i></div><div class="anchor value-res hidden" id="name-appendToFreshChain"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..appendToFreshChain^6b596.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-668">appendToFreshChain</a>(chain []*<a href="#name-Certificate">Certificate</a>, cert *<a href="#name-Certificate">Certificate</a>) []*<a href="#name-Certificate">Certificate</a></span></i></div><div class="anchor value-res hidden" id="name-asn1BitLength"><i>	<input type='checkbox' class="fold" id="asn1BitLength-fold-content"><label for="asn1BitLength-fold-content"> <a href="../../use/crypto/x509..asn1BitLength^00f32.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1104">asn1BitLength</a>(bitString []<a href="../builtin.html#name-byte">byte</a>) <a href="../builtin.html#name-int">int</a></label><span id='asn1BitLength-fold-content-docs' class="fold-docs">
 <span class="md-text">		asn1BitLength returns the bit-length of bitString by considering the
 		most-significant bit in a byte to be the "first" bit. This convention
 		matches ASN.1, but differs from almost everything else.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-base128BigIntLength"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..base128BigIntLength^5b9ae.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-92">base128BigIntLength</a>(n *<a href="../math/big.html">big</a>.<a href="../math/big.html#name-Int">Int</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-base128IntLength"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..base128IntLength^d763e.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-73">base128IntLength</a>(n <a href="../builtin.html#name-uint64">uint64</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-buildCertExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..buildCertExtensions^580af.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1199">buildCertExtensions</a>(template *<a href="#name-Certificate">Certificate</a>, subjectIsEmpty <a href="../builtin.html#name-bool">bool</a>, authorityKeyId []<a href="../builtin.html#name-byte">byte</a>, subjectKeyId []<a href="../builtin.html#name-byte">byte</a>) (ret []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>, err <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-buildCSRExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..buildCSRExtensions^3104d.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1504">buildCSRExtensions</a>(template *<a href="#name-CertificateRequest">CertificateRequest</a>) ([]<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-checkChainConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..checkChainConstraints^a0291.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-510">checkChainConstraints</a>(chain []*<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-checkChainForKeyUsage"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..checkChainForKeyUsage^29417.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-981">checkChainForKeyUsage</a>(chain []*<a href="#name-Certificate">Certificate</a>, keyUsages []<a href="#name-ExtKeyUsage">ExtKeyUsage</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-checkConstraints"><i>	<input type='checkbox' class="fold" id="checkConstraints-fold-content"><label for="checkConstraints-fold-content"> <a href="../../use/crypto/x509..checkConstraints^d11f2.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-453">checkConstraints</a>[T, V, P](c <a href="#name-constraints">constraints</a>[T, V], s V, p P) <a href="../builtin.html#name-error">error</a></label><span id='checkConstraints-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-base128BigIntLength"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..base128BigIntLength^5b9ae.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-92">base128BigIntLength</a>(n *<a href="../math/big.html">big</a>.<a href="../math/big.html#name-Int">Int</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-base128IntLength"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..base128IntLength^d763e.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-73">base128IntLength</a>(n <a href="../builtin.html#name-uint64">uint64</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-buildCertExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..buildCertExtensions^580af.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1199">buildCertExtensions</a>(template *<a href="#name-Certificate">Certificate</a>, subjectIsEmpty <a href="../builtin.html#name-bool">bool</a>, authorityKeyId []<a href="../builtin.html#name-byte">byte</a>, subjectKeyId []<a href="../builtin.html#name-byte">byte</a>) (ret []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>, err <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-buildCSRExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..buildCSRExtensions^3104d.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1504">buildCSRExtensions</a>(template *<a href="#name-CertificateRequest">CertificateRequest</a>) ([]<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-checkChainConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..checkChainConstraints^a0291.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-510">checkChainConstraints</a>(chain []*<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-checkChainForKeyUsage"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..checkChainForKeyUsage^29417.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-986">checkChainForKeyUsage</a>(chain []*<a href="#name-Certificate">Certificate</a>, keyUsages []<a href="#name-ExtKeyUsage">ExtKeyUsage</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-checkConstraints"><i>	<input type='checkbox' class="fold" id="checkConstraints-fold-content"><label for="checkConstraints-fold-content"> <a href="../../use/crypto/x509..checkConstraints^d11f2.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-453">checkConstraints</a>[T, V, P](c <a href="#name-constraints">constraints</a>[T, V], s V, p P) <a href="../builtin.html#name-error">error</a></label><span id='checkConstraints-fold-content-docs' class="fold-docs">
 
 		Type Parameters:
 			T: <a href="../builtin.html#name-string">string</a> | *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>
@@ -1962,7 +1963,11 @@
 <span class="md-text">		checkSignature verifies that signature is a valid signature over signed from
 		a crypto.PublicKey.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-cipherByKey"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..cipherByKey^48ea9.html">func</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-244">cipherByKey</a>(key <a href="#name-PEMCipher">PEMCipher</a>) *<a href="#name-rfc1423Algo">rfc1423Algo</a></span></i></div><div class="anchor value-res hidden" id="name-cipherByName"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..cipherByName^b9c88.html">func</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-234">cipherByName</a>(name <a href="../builtin.html#name-string">string</a>) *<a href="#name-rfc1423Algo">rfc1423Algo</a></span></i></div><div class="anchor value-res hidden" id="name-dnsCompare"><i>	<input type='checkbox' class="fold" id="dnsCompare-fold-content"><label for="dnsCompare-fold-content"> <a href="../../use/crypto/x509..dnsCompare^3c52a.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-285">dnsCompare</a>(a, b <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-int">int</a></label><span id='dnsCompare-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-cipherByKey"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..cipherByKey^48ea9.html">func</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-244">cipherByKey</a>(key <a href="#name-PEMCipher">PEMCipher</a>) *<a href="#name-rfc1423Algo">rfc1423Algo</a></span></i></div><div class="anchor value-res hidden" id="name-cipherByName"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..cipherByName^b9c88.html">func</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-234">cipherByName</a>(name <a href="../builtin.html#name-string">string</a>) *<a href="#name-rfc1423Algo">rfc1423Algo</a></span></i></div><div class="anchor value-res hidden" id="name-containsDistrustedSPKIHash"><i>	<input type='checkbox' class="fold" id="containsDistrustedSPKIHash-fold-content"><label for="containsDistrustedSPKIHash-fold-content"> <a href="../../use/crypto/x509..containsDistrustedSPKIHash^66387.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1422">containsDistrustedSPKIHash</a>(chain []*<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='containsDistrustedSPKIHash-fold-content-docs' class="fold-docs">
+<span class="md-text">		containsDistrustedSPKIHash checks if any of the certificates in the chain
+		have an SPKI whose hash is present in the distrustedSPKIHashes map.</span>
+
+</span></i></div><div class="anchor value-res hidden" id="name-dnsCompare"><i>	<input type='checkbox' class="fold" id="dnsCompare-fold-content"><label for="dnsCompare-fold-content"> <a href="../../use/crypto/x509..dnsCompare^3c52a.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-285">dnsCompare</a>(a, b <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-int">int</a></label><span id='dnsCompare-fold-content-docs' class="fold-docs">
 <span class="md-text">		dnsCompare is a case-insensitive reversed implementation of strings.Compare
 		that operates from the end to the start of the strings. This is more
 		efficient that allocating reversed version of a and b and using
@@ -1989,7 +1994,7 @@
 <span class="md-text">		domainNameValid is an alloc-less version of the checks that
 		domainToReverseLabels does.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-domainToReverseLabels"><i>	<input type='checkbox' class="fold" id="domainToReverseLabels-fold-content"><label for="domainToReverseLabels-fold-content"> <a href="../../use/crypto/x509..domainToReverseLabels^c4083.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-402">domainToReverseLabels</a>(domain <a href="../builtin.html#name-string">string</a>) (reverseLabels []<a href="../builtin.html#name-string">string</a>, ok <a href="../builtin.html#name-bool">bool</a>)</label><span id='domainToReverseLabels-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-domainToReverseLabels"><i>	<input type='checkbox' class="fold" id="domainToReverseLabels-fold-content"><label for="domainToReverseLabels-fold-content"> <a href="../../use/crypto/x509..domainToReverseLabels^c4083.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-404">domainToReverseLabels</a>(domain <a href="../builtin.html#name-string">string</a>) (reverseLabels []<a href="../builtin.html#name-string">string</a>, ok <a href="../builtin.html#name-bool">bool</a>)</label><span id='domainToReverseLabels-fold-content-docs' class="fold-docs">
 <span class="md-text">		domainToReverseLabels converts a textual domain name like foo.example.com to
 		the list of labels in reverse order, e.g. ["com", "example", "foo"].</span>
 
@@ -1998,7 +2003,7 @@
 		identifier for public key types supported in certificates and CSRs. Marshal
 		and Parse functions may support a different set of public key types.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-getSignatureAlgorithmFromAI"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..getSignatureAlgorithmFromAI^cd496.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-416">getSignatureAlgorithmFromAI</a>(ai <a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AlgorithmIdentifier">AlgorithmIdentifier</a>) <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a></span></i></div><div class="anchor value-res hidden" id="name-init"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..init^bb540.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-251">init</a>()</span></i></div><div class="anchor value-res hidden" id="name-init"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..init^bb540.html">func</a> <a href="../../src/crypto/x509/root_linux.go.html#line-25">init</a>()</span></i></div><div class="anchor value-res hidden" id="name-initSystemRoots"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..initSystemRoots^66228.html">func</a> <a href="../../src/crypto/x509/root.go.html#line-38">initSystemRoots</a>()</span></i></div><div class="anchor value-res hidden" id="name-ipBinarySearch"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipBinarySearch^75086.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-145">ipBinarySearch</a>(constraint *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, target <a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-ipMatch"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipMatch^3d713.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-149">ipMatch</a>(constraint *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, target <a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-ipNetworkCompare"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipNetworkCompare^5b1ca.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-137">ipNetworkCompare</a>(a, b *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-ipNetworkSubset"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipNetworkSubset^48885.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-126">ipNetworkSubset</a>(a, b *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-isIA5String"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..isIA5String^3228b.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1186">isIA5String</a>(s <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-isPrintable"><i>	<input type='checkbox' class="fold" id="isPrintable-fold-content"><label for="isPrintable-fold-content"> <a href="../../use/crypto/x509..isPrintable^39c15.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-35">isPrintable</a>(b <a href="../builtin.html#name-byte">byte</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='isPrintable-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-getSignatureAlgorithmFromAI"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..getSignatureAlgorithmFromAI^cd496.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-416">getSignatureAlgorithmFromAI</a>(ai <a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AlgorithmIdentifier">AlgorithmIdentifier</a>) <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a></span></i></div><div class="anchor value-res hidden" id="name-init"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..init^bb540.html">func</a> <a href="../../src/crypto/x509/root_linux.go.html#line-25">init</a>()</span></i></div><div class="anchor value-res hidden" id="name-init"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..init^bb540.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-251">init</a>()</span></i></div><div class="anchor value-res hidden" id="name-initSystemRoots"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..initSystemRoots^66228.html">func</a> <a href="../../src/crypto/x509/root.go.html#line-38">initSystemRoots</a>()</span></i></div><div class="anchor value-res hidden" id="name-ipBinarySearch"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipBinarySearch^75086.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-145">ipBinarySearch</a>(constraint *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, target <a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-ipMatch"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipMatch^3d713.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-149">ipMatch</a>(constraint *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, target <a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-ipNetworkCompare"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipNetworkCompare^5b1ca.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-137">ipNetworkCompare</a>(a, b *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) <a href="../builtin.html#name-int">int</a></span></i></div><div class="anchor value-res hidden" id="name-ipNetworkSubset"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..ipNetworkSubset^48885.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-126">ipNetworkSubset</a>(a, b *<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-isIA5String"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..isIA5String^3228b.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1186">isIA5String</a>(s <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-isPrintable"><i>	<input type='checkbox' class="fold" id="isPrintable-fold-content"><label for="isPrintable-fold-content"> <a href="../../use/crypto/x509..isPrintable^39c15.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-35">isPrintable</a>(b <a href="../builtin.html#name-byte">byte</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='isPrintable-fold-content-docs' class="fold-docs">
 <span class="md-text">		isPrintable reports whether the given b is in the ASN.1 PrintableString set.
 		This is a simplified version of encoding/asn1.isPrintable.</span>
 
@@ -2021,7 +2026,7 @@
 <span class="md-text">		marshalSANs marshals a list of addresses into a the contents of an X.509
 		SubjectAlternativeName extension.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-matchExactly"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..matchExactly^dd43f.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-863">matchExactly</a>(hostA, hostB <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-matchHostnames"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..matchHostnames^1fee7.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-870">matchHostnames</a>(pattern <a href="../builtin.html#name-string">string</a>, hostParts []<a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-mustNewOIDFromInts"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..mustNewOIDFromInts^88765.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1035">mustNewOIDFromInts</a>(ints []<a href="../builtin.html#name-uint64">uint64</a>) <a href="#name-OID">OID</a></span></i></div><div class="anchor value-res hidden" id="name-namedCurveFromOID"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..namedCurveFromOID^1bc96.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-537">namedCurveFromOID</a>(oid <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-ObjectIdentifier">ObjectIdentifier</a>) <a href="elliptic.html">elliptic</a>.<a href="elliptic.html#name-Curve">Curve</a></span></i></div><div class="anchor value-res hidden" id="name-newDNSConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newDNSConstraints^5cced.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-331">newDNSConstraints</a>(l []<a href="../builtin.html#name-string">string</a>, permitted <a href="../builtin.html#name-bool">bool</a>) interface{query(<a href="../builtin.html#name-string">string</a>) (<a href="../builtin.html#name-string">string</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newEmailConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newEmailConstraints^1776e.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-401">newEmailConstraints</a>(l []<a href="../builtin.html#name-string">string</a>, permitted <a href="../builtin.html#name-bool">bool</a>) interface{query(<a href="#name-rfc2821Mailbox">rfc2821Mailbox</a>) (<a href="../builtin.html#name-string">string</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newIPNetConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newIPNetConstraints^091a5.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-164">newIPNetConstraints</a>(l []*<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) interface{query(<a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) (*<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newOIDFromDER"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newOIDFromDER^3b85e.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-33">newOIDFromDER</a>(der []<a href="../builtin.html#name-byte">byte</a>) (<a href="#name-OID">OID</a>, <a href="../builtin.html#name-bool">bool</a>)</span></i></div><div class="anchor value-res hidden" id="name-newPolicyGraph"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newPolicyGraph^76d81.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1075">newPolicyGraph</a>() *<a href="#name-policyGraph">policyGraph</a></span></i></div><div class="anchor value-res hidden" id="name-newPolicyGraphNode"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newPolicyGraphNode^07eb8.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1052">newPolicyGraphNode</a>(valid <a href="#name-OID">OID</a>, parents []*<a href="#name-policyGraphNode">policyGraphNode</a>) *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></div><div class="anchor value-res hidden" id="name-newRawAttributes"><i>	<input type='checkbox' class="fold" id="newRawAttributes-fold-content"><label for="newRawAttributes-fold-content"> <a href="../../use/crypto/x509..newRawAttributes^d2a41.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1979">newRawAttributes</a>(attributes []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AttributeTypeAndValueSET">AttributeTypeAndValueSET</a>) ([]<a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-RawValue">RawValue</a>, <a href="../builtin.html#name-error">error</a>)</label><span id='newRawAttributes-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-matchExactly"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..matchExactly^dd43f.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-868">matchExactly</a>(hostA, hostB <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-matchHostnames"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..matchHostnames^1fee7.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-875">matchHostnames</a>(pattern <a href="../builtin.html#name-string">string</a>, hostParts []<a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-mustNewOIDFromInts"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..mustNewOIDFromInts^88765.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1040">mustNewOIDFromInts</a>(ints []<a href="../builtin.html#name-uint64">uint64</a>) <a href="#name-OID">OID</a></span></i></div><div class="anchor value-res hidden" id="name-namedCurveFromOID"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..namedCurveFromOID^1bc96.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-537">namedCurveFromOID</a>(oid <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-ObjectIdentifier">ObjectIdentifier</a>) <a href="elliptic.html">elliptic</a>.<a href="elliptic.html#name-Curve">Curve</a></span></i></div><div class="anchor value-res hidden" id="name-newDNSConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newDNSConstraints^5cced.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-331">newDNSConstraints</a>(l []<a href="../builtin.html#name-string">string</a>, permitted <a href="../builtin.html#name-bool">bool</a>) interface{query(<a href="../builtin.html#name-string">string</a>) (<a href="../builtin.html#name-string">string</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newEmailConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newEmailConstraints^1776e.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-401">newEmailConstraints</a>(l []<a href="../builtin.html#name-string">string</a>, permitted <a href="../builtin.html#name-bool">bool</a>) interface{query(<a href="#name-rfc2821Mailbox">rfc2821Mailbox</a>) (<a href="../builtin.html#name-string">string</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newIPNetConstraints"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newIPNetConstraints^091a5.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-164">newIPNetConstraints</a>(l []*<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>) interface{query(<a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>) (*<a href="../net.html">net</a>.<a href="../net.html#name-IPNet">IPNet</a>, <a href="../builtin.html#name-bool">bool</a>)}</span></i></div><div class="anchor value-res hidden" id="name-newOIDFromDER"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newOIDFromDER^3b85e.html">func</a> <a href="../../src/crypto/x509/oid.go.html#line-33">newOIDFromDER</a>(der []<a href="../builtin.html#name-byte">byte</a>) (<a href="#name-OID">OID</a>, <a href="../builtin.html#name-bool">bool</a>)</span></i></div><div class="anchor value-res hidden" id="name-newPolicyGraph"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newPolicyGraph^76d81.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1080">newPolicyGraph</a>() *<a href="#name-policyGraph">policyGraph</a></span></i></div><div class="anchor value-res hidden" id="name-newPolicyGraphNode"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..newPolicyGraphNode^07eb8.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1057">newPolicyGraphNode</a>(valid <a href="#name-OID">OID</a>, parents []*<a href="#name-policyGraphNode">policyGraphNode</a>) *<a href="#name-policyGraphNode">policyGraphNode</a></span></i></div><div class="anchor value-res hidden" id="name-newRawAttributes"><i>	<input type='checkbox' class="fold" id="newRawAttributes-fold-content"><label for="newRawAttributes-fold-content"> <a href="../../use/crypto/x509..newRawAttributes^d2a41.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1979">newRawAttributes</a>(attributes []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AttributeTypeAndValueSET">AttributeTypeAndValueSET</a>) ([]<a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-RawValue">RawValue</a>, <a href="../builtin.html#name-error">error</a>)</label><span id='newRawAttributes-fold-content-docs' class="fold-docs">
 <span class="md-text">		newRawAttributes converts AttributeTypeAndValueSETs from a template
 		CertificateRequest's Attributes into tbsCertificateRequest RawAttributes.</span>
 
@@ -2052,13 +2057,13 @@
 </span></i></div><div class="anchor value-res hidden" id="name-parseNameConstraintsExtension"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseNameConstraintsExtension^191d8.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-533">parseNameConstraintsExtension</a>(out *<a href="#name-Certificate">Certificate</a>, e <a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-Extension">Extension</a>) (unhandled <a href="../builtin.html#name-bool">bool</a>, err <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parsePublicKey"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parsePublicKey^184c5.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-249">parsePublicKey</a>(keyData *<a href="#name-publicKeyInfo">publicKeyInfo</a>) (<a href="../builtin.html#name-any">any</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseRawAttributes"><i>	<input type='checkbox' class="fold" id="parseRawAttributes-fold-content"><label for="parseRawAttributes-fold-content"> <a href="../../use/crypto/x509..parseRawAttributes^bdaa0.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1996">parseRawAttributes</a>(rawAttributes []<a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-RawValue">RawValue</a>) []<a href="x509/pkix.html">pkix</a>.<a href="x509/pkix.html#name-AttributeTypeAndValueSET">AttributeTypeAndValueSET</a></label><span id='parseRawAttributes-fold-content-docs' class="fold-docs">
 <span class="md-text">		parseRawAttributes Unmarshals RawAttributes into AttributeTypeAndValueSETs.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-parseRFC2821Mailbox"><i>	<input type='checkbox' class="fold" id="parseRFC2821Mailbox-fold-content"><label for="parseRFC2821Mailbox-fold-content"> <a href="../../use/crypto/x509..parseRFC2821Mailbox^e4401.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-264">parseRFC2821Mailbox</a>(in <a href="../builtin.html#name-string">string</a>) (mailbox <a href="#name-rfc2821Mailbox">rfc2821Mailbox</a>, ok <a href="../builtin.html#name-bool">bool</a>)</label><span id='parseRFC2821Mailbox-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-parseRFC2821Mailbox"><i>	<input type='checkbox' class="fold" id="parseRFC2821Mailbox-fold-content"><label for="parseRFC2821Mailbox-fold-content"> <a href="../../use/crypto/x509..parseRFC2821Mailbox^e4401.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-266">parseRFC2821Mailbox</a>(in <a href="../builtin.html#name-string">string</a>) (mailbox <a href="#name-rfc2821Mailbox">rfc2821Mailbox</a>, ok <a href="../builtin.html#name-bool">bool</a>)</label><span id='parseRFC2821Mailbox-fold-content-docs' class="fold-docs">
 <span class="md-text">		parseRFC2821Mailbox parses an email address into local and domain parts,
 		based on the ABNF for a “Mailbox” from RFC 2821. According to RFC 5280,
 		Section 4.2.1.6 that's correct for an rfc822Name from a certificate: “The
 		format of an rfc822Name is a "Mailbox" as defined in RFC 2821, Section 4.1.2”.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-parseSANExtension"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseSANExtension^b910a.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-400">parseSANExtension</a>(der <a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (dnsNames, emailAddresses []<a href="../builtin.html#name-string">string</a>, ipAddresses []<a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>, uris []*<a href="../net/url.html">url</a>.<a href="../net/url.html#name-URL">URL</a>, err <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseTime"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseTime^c7bdc.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-201">parseTime</a>(der *<a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (<a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseURIs"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseURIs^ad057.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-577">parseURIs</a>(uris []*<a href="../net/url.html">url</a>.<a href="../net/url.html#name-URL">URL</a>) ([]<a href="#name-parsedURI">parsedURI</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseValidity"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseValidity^49460.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-218">parseValidity</a>(der <a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (<a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-policiesValid"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..policiesValid^aeb80.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1180">policiesValid</a>(chain []*<a href="#name-Certificate">Certificate</a>, opts <a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-processExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..processExtensions^2bd57.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-672">processExtensions</a>(out *<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-readUniqueDirectoryEntries"><i>	<input type='checkbox' class="fold" id="readUniqueDirectoryEntries-fold-content"><label for="readUniqueDirectoryEntries-fold-content"> <a href="../../use/crypto/x509..readUniqueDirectoryEntries^f194f.html">func</a> <a href="../../src/crypto/x509/root_unix.go.html#line-86">readUniqueDirectoryEntries</a>(dir <a href="../builtin.html#name-string">string</a>) ([]<a href="../io/fs.html">fs</a>.<a href="../io/fs.html#name-DirEntry">DirEntry</a>, <a href="../builtin.html#name-error">error</a>)</label><span id='readUniqueDirectoryEntries-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-parseSANExtension"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseSANExtension^b910a.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-400">parseSANExtension</a>(der <a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (dnsNames, emailAddresses []<a href="../builtin.html#name-string">string</a>, ipAddresses []<a href="../net.html">net</a>.<a href="../net.html#name-IP">IP</a>, uris []*<a href="../net/url.html">url</a>.<a href="../net/url.html#name-URL">URL</a>, err <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseTime"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseTime^c7bdc.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-201">parseTime</a>(der *<a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (<a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseURIs"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseURIs^ad057.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-577">parseURIs</a>(uris []*<a href="../net/url.html">url</a>.<a href="../net/url.html#name-URL">URL</a>) ([]<a href="#name-parsedURI">parsedURI</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-parseValidity"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..parseValidity^49460.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-218">parseValidity</a>(der <a href="../vendor/golang.org/x/crypto/cryptobyte.html">cryptobyte</a>.<a href="../vendor/golang.org/x/crypto/cryptobyte.html#name-String">String</a>) (<a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../time.html">time</a>.<a href="../time.html#name-Time">Time</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-policiesValid"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..policiesValid^aeb80.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-1185">policiesValid</a>(chain []*<a href="#name-Certificate">Certificate</a>, opts <a href="#name-VerifyOptions">VerifyOptions</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-processExtensions"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..processExtensions^2bd57.html">func</a> <a href="../../src/crypto/x509/parser.go.html#line-672">processExtensions</a>(out *<a href="#name-Certificate">Certificate</a>) <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-readUniqueDirectoryEntries"><i>	<input type='checkbox' class="fold" id="readUniqueDirectoryEntries-fold-content"><label for="readUniqueDirectoryEntries-fold-content"> <a href="../../use/crypto/x509..readUniqueDirectoryEntries^f194f.html">func</a> <a href="../../src/crypto/x509/root_unix.go.html#line-86">readUniqueDirectoryEntries</a>(dir <a href="../builtin.html#name-string">string</a>) ([]<a href="../io/fs.html">fs</a>.<a href="../io/fs.html#name-DirEntry">DirEntry</a>, <a href="../builtin.html#name-error">error</a>)</label><span id='readUniqueDirectoryEntries-fold-content-docs' class="fold-docs">
 <span class="md-text">		readUniqueDirectoryEntries is like os.ReadDir but omits
 		symlinks that point within the directory.</span>
 
@@ -2067,18 +2072,18 @@
 		Identifier to use for signing, based on the key type. If sigAlgo is not zero
 		then it overrides the default.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-signTBS"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..signTBS^514bb.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1588">signTBS</a>(tbs []<a href="../builtin.html#name-byte">byte</a>, key <a href="../crypto.html">crypto</a>.<a href="../crypto.html#name-Signer">Signer</a>, sigAlg <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a>, rand <a href="../io.html">io</a>.<a href="../io.html#name-Reader">Reader</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-splitHostname"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..splitHostname^87988.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-977">splitHostname</a>(host <a href="../builtin.html#name-string">string</a>) []<a href="../builtin.html#name-string">string</a></span></i></div><div class="anchor value-res hidden" id="name-subjectBytes"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..subjectBytes^0a31c.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1523">subjectBytes</a>(cert *<a href="#name-Certificate">Certificate</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-systemRootsPool"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..systemRootsPool^17bcc.html">func</a> <a href="../../src/crypto/x509/root.go.html#line-31">systemRootsPool</a>() *<a href="#name-CertPool">CertPool</a></span></i></div><div class="anchor value-res hidden" id="name-toLowerCaseASCII"><i>	<input type='checkbox' class="fold" id="toLowerCaseASCII-fold-content"><label for="toLowerCaseASCII-fold-content"> <a href="../../use/crypto/x509..toLowerCaseASCII^66bdf.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-898">toLowerCaseASCII</a>(in <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-string">string</a></label><span id='toLowerCaseASCII-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-signTBS"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..signTBS^514bb.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1588">signTBS</a>(tbs []<a href="../builtin.html#name-byte">byte</a>, key <a href="../crypto.html">crypto</a>.<a href="../crypto.html#name-Signer">Signer</a>, sigAlg <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a>, rand <a href="../io.html">io</a>.<a href="../io.html#name-Reader">Reader</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-splitHostname"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..splitHostname^87988.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-982">splitHostname</a>(host <a href="../builtin.html#name-string">string</a>) []<a href="../builtin.html#name-string">string</a></span></i></div><div class="anchor value-res hidden" id="name-subjectBytes"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..subjectBytes^0a31c.html">func</a> <a href="../../src/crypto/x509/x509.go.html#line-1523">subjectBytes</a>(cert *<a href="#name-Certificate">Certificate</a>) ([]<a href="../builtin.html#name-byte">byte</a>, <a href="../builtin.html#name-error">error</a>)</span></i></div><div class="anchor value-res hidden" id="name-systemRootsPool"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..systemRootsPool^17bcc.html">func</a> <a href="../../src/crypto/x509/root.go.html#line-31">systemRootsPool</a>() *<a href="#name-CertPool">CertPool</a></span></i></div><div class="anchor value-res hidden" id="name-toLowerCaseASCII"><i>	<input type='checkbox' class="fold" id="toLowerCaseASCII-fold-content"><label for="toLowerCaseASCII-fold-content"> <a href="../../use/crypto/x509..toLowerCaseASCII^66bdf.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-903">toLowerCaseASCII</a>(in <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-string">string</a></label><span id='toLowerCaseASCII-fold-content-docs' class="fold-docs">
 <span class="md-text">		toLowerCaseASCII returns a lower-case version of in. See RFC 6125 6.4.1. We use
 		an explicitly ASCII function to avoid any sharp corners resulting from
 		performing Unicode operations on DNS labels.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-trimFirstLabel"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..trimFirstLabel^c5a3a.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-617">trimFirstLabel</a>(dnsName <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-string">string</a></span></i></div><div class="anchor value-res hidden" id="name-validHostname"><i>	<input type='checkbox' class="fold" id="validHostname-fold-content"><label for="validHostname-fold-content"> <a href="../../use/crypto/x509..validHostname^6f68b.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-814">validHostname</a>(host <a href="../builtin.html#name-string">string</a>, isPattern <a href="../builtin.html#name-bool">bool</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='validHostname-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-trimFirstLabel"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..trimFirstLabel^c5a3a.html">func</a> <a href="../../src/crypto/x509/constraints.go.html#line-617">trimFirstLabel</a>(dnsName <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-string">string</a></span></i></div><div class="anchor value-res hidden" id="name-validHostname"><i>	<input type='checkbox' class="fold" id="validHostname-fold-content"><label for="validHostname-fold-content"> <a href="../../use/crypto/x509..validHostname^6f68b.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-819">validHostname</a>(host <a href="../builtin.html#name-string">string</a>, isPattern <a href="../builtin.html#name-bool">bool</a>) <a href="../builtin.html#name-bool">bool</a></label><span id='validHostname-fold-content-docs' class="fold-docs">
 <span class="md-text">		validHostname reports whether host is a valid hostname that can be matched or
 		matched against according to RFC 6125 2.2, with some leniency to accommodate
 		legacy values.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-validHostnameInput"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..validHostnameInput^1c66a.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-809">validHostnameInput</a>(host <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-validHostnamePattern"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..validHostnamePattern^b6154.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-808">validHostnamePattern</a>(host <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div></div>
-<div id="exported-variables"><span class="title">Package-Level Variables<span class="title-stat"><i> (total 89, in which 2 are exported)</i></span></span>
+</span></i></div><div class="anchor value-res hidden" id="name-validHostnameInput"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..validHostnameInput^1c66a.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-814">validHostnameInput</a>(host <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div><div class="anchor value-res hidden" id="name-validHostnamePattern"><i>	<span class="nodocs"> <a href="../../use/crypto/x509..validHostnamePattern^b6154.html">func</a> <a href="../../src/crypto/x509/verify.go.html#line-813">validHostnamePattern</a>(host <a href="../builtin.html#name-string">string</a>) <a href="../builtin.html#name-bool">bool</a></span></i></div></div>
+<div id="exported-variables"><span class="title">Package-Level Variables<span class="title-stat"><i> (total 90, in which 2 are exported)</i></span></span>
 
 <div class="anchor value-res" id="name-ErrUnsupportedAlgorithm">	<input type='checkbox' class="fold" id="ErrUnsupportedAlgorithm-fold-content"><label for="ErrUnsupportedAlgorithm-fold-content">  <a href="../../use/crypto/x509..ErrUnsupportedAlgorithm.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-894">ErrUnsupportedAlgorithm</a> <a href="../builtin.html#name-error">error</a></label><span id='ErrUnsupportedAlgorithm-fold-content-docs' class="fold-docs">
 <span class="md-text">		ErrUnsupportedAlgorithm results from attempting to perform an operation that
@@ -2087,12 +2092,17 @@
 </span></div><div class="anchor value-res" id="name-IncorrectPasswordError">	<input type='checkbox' class="fold" id="IncorrectPasswordError-fold-content"><label for="IncorrectPasswordError-fold-content">  <a href="../../use/crypto/x509..IncorrectPasswordError.html">var</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-110">IncorrectPasswordError</a> <a href="../builtin.html#name-error">error</a></label><span id='IncorrectPasswordError-fold-content-docs' class="fold-docs">
 <span class="md-text">		IncorrectPasswordError is returned when an incorrect password is detected.</span>
 
-</span></div>	<input type='checkbox' class="showhide" id="unexported-variables-showhide"><i><label for="unexported-variables-showhide" class="show-inline">/* 87 unexporteds ... */</label><label for="unexported-variables-showhide" class="hide-inline">/* 87 unexporteds: */</label></i><div class="anchor value-res hidden" id="name-_ExtKeyUsage_index"><i>	<span class="nodocs">  <a href="../../use/crypto/x509.._ExtKeyUsage_index^98456.html">var</a> <a href="../../src/crypto/x509/x509_string.go.html#line-82">_ExtKeyUsage_index</a> [15]<a href="../builtin.html#name-uint8">uint8</a></span></i></div><div class="anchor value-res hidden" id="name-_KeyUsage_index_0"><i>	<span class="nodocs">  <a href="../../use/crypto/x509.._KeyUsage_index_0^7c9dc.html">var</a> <a href="../../src/crypto/x509/x509_string.go.html#line-34">_KeyUsage_index_0</a> [3]<a href="../builtin.html#name-uint8">uint8</a></span></i></div><div class="anchor value-res hidden" id="name-anyPolicyOID"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..anyPolicyOID^08ed8.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-1073">anyPolicyOID</a> <a href="#name-OID">OID</a></span></i></div><div class="anchor value-res hidden" id="name-certDirectories"><i>	<input type='checkbox' class="fold" id="certDirectories-fold-content"><label for="certDirectories-fold-content">  <a href="../../use/crypto/x509..certDirectories^350c1.html">var</a> <a href="../../src/crypto/x509/root_linux.go.html#line-20">certDirectories</a> []<a href="../builtin.html#name-string">string</a></label><span id='certDirectories-fold-content-docs' class="fold-docs">
+</span></div>	<input type='checkbox' class="showhide" id="unexported-variables-showhide"><i><label for="unexported-variables-showhide" class="show-inline">/* 88 unexporteds ... */</label><label for="unexported-variables-showhide" class="hide-inline">/* 88 unexporteds: */</label></i><div class="anchor value-res hidden" id="name-_ExtKeyUsage_index"><i>	<span class="nodocs">  <a href="../../use/crypto/x509.._ExtKeyUsage_index^98456.html">var</a> <a href="../../src/crypto/x509/x509_string.go.html#line-82">_ExtKeyUsage_index</a> [15]<a href="../builtin.html#name-uint8">uint8</a></span></i></div><div class="anchor value-res hidden" id="name-_KeyUsage_index_0"><i>	<span class="nodocs">  <a href="../../use/crypto/x509.._KeyUsage_index_0^7c9dc.html">var</a> <a href="../../src/crypto/x509/x509_string.go.html#line-34">_KeyUsage_index_0</a> [3]<a href="../builtin.html#name-uint8">uint8</a></span></i></div><div class="anchor value-res hidden" id="name-anyPolicyOID"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..anyPolicyOID^08ed8.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-1078">anyPolicyOID</a> <a href="#name-OID">OID</a></span></i></div><div class="anchor value-res hidden" id="name-certDirectories"><i>	<input type='checkbox' class="fold" id="certDirectories-fold-content"><label for="certDirectories-fold-content">  <a href="../../use/crypto/x509..certDirectories^350c1.html">var</a> <a href="../../src/crypto/x509/root_linux.go.html#line-20">certDirectories</a> []<a href="../builtin.html#name-string">string</a></label><span id='certDirectories-fold-content-docs' class="fold-docs">
 <span class="md-text">		Possible directories with certificate files; all will be read.</span>
 
 </span></i></div><div class="anchor value-res hidden" id="name-certFiles"><i>	<input type='checkbox' class="fold" id="certFiles-fold-content"><label for="certFiles-fold-content">  <a href="../../use/crypto/x509..certFiles^d35c2.html">var</a> <a href="../../src/crypto/x509/root_linux.go.html#line-10">certFiles</a> []<a href="../builtin.html#name-string">string</a></label><span id='certFiles-fold-content-docs' class="fold-docs">
 <span class="md-text">		Possible certificate files; stop after finding one.</span>
 
+</span></i></div><div class="anchor value-res hidden" id="name-distrustedSPKIHashes"><i>	<input type='checkbox' class="fold" id="distrustedSPKIHashes-fold-content"><label for="distrustedSPKIHashes-fold-content">  <a href="../../use/crypto/x509..distrustedSPKIHashes^39e5c.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-1409">distrustedSPKIHashes</a> map[<a href="../builtin.html#name-string">string</a>]struct{}</label><span id='distrustedSPKIHashes-fold-content-docs' class="fold-docs">
+<span class="md-text">		distrustedSPKIHashes contains hashes of SPKIs from certificates which
+		we don't consider to be trustworthy. We use these hashes to filter out
+		chains returned by Verify</span>
+
 </span></i></div><div class="anchor value-res hidden" id="name-dnsCompareTable"><i>	<input type='checkbox' class="fold" id="dnsCompareTable-fold-content"><label for="dnsCompareTable-fold-content">  <a href="../../use/crypto/x509..dnsCompareTable^79bbe.html">var</a> <a href="../../src/crypto/x509/constraints.go.html#line-249">dnsCompareTable</a> [256]<a href="../builtin.html#name-byte">byte</a></label><span id='dnsCompareTable-fold-content-docs' class="fold-docs">
 <span class="md-text">		dnsCompareTable contains the ASCII alphabet mapped from a characters index in
 		the table to its lowercased form.</span>
@@ -2101,11 +2111,11 @@
 <span class="md-text">		emptyASN1Subject is the ASN.1 DER encoding of an empty Subject, which is
 		just an empty SEQUENCE.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-emptyRawValue"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..emptyRawValue^9c63b.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-389">emptyRawValue</a> <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-RawValue">RawValue</a></span></i></div><div class="anchor value-res hidden" id="name-errInvalidOID"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..errInvalidOID^6e9ad.html">var</a> <a href="../../src/crypto/x509/oid.go.html#line-19">errInvalidOID</a> <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-errNotParsed"><i>	<input type='checkbox' class="fold" id="errNotParsed-fold-content"><label for="errNotParsed-fold-content">  <a href="../../use/crypto/x509..errNotParsed^5d726.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-189">errNotParsed</a> <a href="../builtin.html#name-error">error</a></label><span id='errNotParsed-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-emptyRawValue"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..emptyRawValue^9c63b.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-389">emptyRawValue</a> <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-RawValue">RawValue</a></span></i></div><div class="anchor value-res hidden" id="name-errInvalidOID"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..errInvalidOID^6e9ad.html">var</a> <a href="../../src/crypto/x509/oid.go.html#line-19">errInvalidOID</a> <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-errNotParsed"><i>	<input type='checkbox' class="fold" id="errNotParsed-fold-content"><label for="errNotParsed-fold-content">  <a href="../../use/crypto/x509..errNotParsed^5d726.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-191">errNotParsed</a> <a href="../builtin.html#name-error">error</a></label><span id='errNotParsed-fold-content-docs' class="fold-docs">
 <span class="md-text">		errNotParsed is returned when a certificate without ASN.1 contents is
 		verified. Platform-specific verification needs the ASN.1 contents.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-errSignatureLimit"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..errSignatureLimit^ae435.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-723">errSignatureLimit</a> <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-extKeyUsageOIDs"><i>	<input type='checkbox' class="fold" id="extKeyUsageOIDs-fold-content"><label for="extKeyUsageOIDs-fold-content">  <a href="../../use/crypto/x509..extKeyUsageOIDs^7c1eb.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-652">extKeyUsageOIDs</a> []struct{extKeyUsage <a href="#name-ExtKeyUsage">ExtKeyUsage</a>; oid <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-ObjectIdentifier">ObjectIdentifier</a>}</label><span id='extKeyUsageOIDs-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-errSignatureLimit"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..errSignatureLimit^ae435.html">var</a> <a href="../../src/crypto/x509/verify.go.html#line-728">errSignatureLimit</a> <a href="../builtin.html#name-error">error</a></span></i></div><div class="anchor value-res hidden" id="name-extKeyUsageOIDs"><i>	<input type='checkbox' class="fold" id="extKeyUsageOIDs-fold-content"><label for="extKeyUsageOIDs-fold-content">  <a href="../../use/crypto/x509..extKeyUsageOIDs^7c1eb.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-652">extKeyUsageOIDs</a> []struct{extKeyUsage <a href="#name-ExtKeyUsage">ExtKeyUsage</a>; oid <a href="../encoding/asn1.html">asn1</a>.<a href="../encoding/asn1.html#name-ObjectIdentifier">ObjectIdentifier</a>}</label><span id='extKeyUsageOIDs-fold-content-docs' class="fold-docs">
 <span class="md-text">		extKeyUsageOIDs contains the mapping between an ExtKeyUsage and its OID.</span>
 
 </span></i></div><div class="anchor value-res hidden" id="name-fallbacksSet"><i>	<input type='checkbox' class="fold" id="fallbacksSet-fold-content"><label for="fallbacksSet-fold-content">  <a href="../../use/crypto/x509..fallbacksSet^db188.html">var</a> <a href="../../src/crypto/x509/root.go.html#line-27">fallbacksSet</a> <a href="../builtin.html#name-bool">bool</a></label><span id='fallbacksSet-fold-content-docs' class="fold-docs">
@@ -3385,35 +3395,35 @@
 </span></i></div><div class="anchor value-res hidden" id="name-x509sha256skid"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..x509sha256skid^7275c.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-1812">x509sha256skid</a> *<a href="../internal/godebug.html">godebug</a>.<a href="../internal/godebug.html#name-Setting">Setting</a></span></i></div><div class="anchor value-res hidden" id="name-x509usefallbackroots"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..x509usefallbackroots^f0165.html">var</a> <a href="../../src/crypto/x509/root.go.html#line-65">x509usefallbackroots</a> *<a href="../internal/godebug.html">godebug</a>.<a href="../internal/godebug.html#name-Setting">Setting</a></span></i></div><div class="anchor value-res hidden" id="name-x509usepolicies"><i>	<span class="nodocs">  <a href="../../use/crypto/x509..x509usepolicies^ff094.html">var</a> <a href="../../src/crypto/x509/x509.go.html#line-1197">x509usepolicies</a> *<a href="../internal/godebug.html">godebug</a>.<a href="../internal/godebug.html#name-Setting">Setting</a></span></i></div></div>
 <div id="exported-constants"><span class="title">Package-Level Constants<span class="title-stat"><i> (total 82, in which 61 are exported)</i></span></span>
 
-<div class="anchor value-res" id="name-CANotAuthorizedForExtKeyUsage">	<input type='checkbox' class="fold" id="CANotAuthorizedForExtKeyUsage-fold-content"><label for="CANotAuthorizedForExtKeyUsage-fold-content"><a href="../../use/crypto/x509..CANotAuthorizedForExtKeyUsage.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-59">CANotAuthorizedForExtKeyUsage</a> <a href="#name-InvalidReason">InvalidReason</a> = 9</label><span id='CANotAuthorizedForExtKeyUsage-fold-content-docs' class="fold-docs">
+<div class="anchor value-res" id="name-CANotAuthorizedForExtKeyUsage">	<input type='checkbox' class="fold" id="CANotAuthorizedForExtKeyUsage-fold-content"><label for="CANotAuthorizedForExtKeyUsage-fold-content"><a href="../../use/crypto/x509..CANotAuthorizedForExtKeyUsage.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-61">CANotAuthorizedForExtKeyUsage</a> <a href="#name-InvalidReason">InvalidReason</a> = 9</label><span id='CANotAuthorizedForExtKeyUsage-fold-content-docs' class="fold-docs">
 <span class="md-text">		CANotAuthorizedForExtKeyUsage results when an intermediate or root
 		certificate does not permit a requested extended key usage.</span>
 
-</span></div><div class="anchor value-res" id="name-CANotAuthorizedForThisName">	<input type='checkbox' class="fold" id="CANotAuthorizedForThisName-fold-content"><label for="CANotAuthorizedForThisName-fold-content"><a href="../../use/crypto/x509..CANotAuthorizedForThisName.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-35">CANotAuthorizedForThisName</a> <a href="#name-InvalidReason">InvalidReason</a> = 2</label><span id='CANotAuthorizedForThisName-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-CANotAuthorizedForThisName">	<input type='checkbox' class="fold" id="CANotAuthorizedForThisName-fold-content"><label for="CANotAuthorizedForThisName-fold-content"><a href="../../use/crypto/x509..CANotAuthorizedForThisName.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-37">CANotAuthorizedForThisName</a> <a href="#name-InvalidReason">InvalidReason</a> = 2</label><span id='CANotAuthorizedForThisName-fold-content-docs' class="fold-docs">
 <span class="md-text">		CANotAuthorizedForThisName results when an intermediate or root
 		certificate has a name constraint which doesn't permit a DNS or
 		other name (including IP address) in the leaf certificate.</span>
 
-</span></div><div class="anchor value-res" id="name-DSA">	<span class="nodocs"><a href="../../use/crypto/x509..DSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-268">DSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 2 // <span class="md-text">Only supported for parsing.</span></span></div><div class="anchor value-res" id="name-DSAWithSHA1">	<span class="nodocs"><a href="../../use/crypto/x509..DSAWithSHA1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-224">DSAWithSHA1</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 7 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-DSAWithSHA256">	<span class="nodocs"><a href="../../use/crypto/x509..DSAWithSHA256.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-225">DSAWithSHA256</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 8 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-ECDSA">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-269">ECDSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 3</span></div><div class="anchor value-res" id="name-ECDSAWithSHA1">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-226">ECDSAWithSHA1</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 9 // <span class="md-text">Only supported for signing, and verification of CRLs, CSRs, and OCSP responses.</span></span></div><div class="anchor value-res" id="name-ECDSAWithSHA256">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA256.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-227">ECDSAWithSHA256</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 10</span></div><div class="anchor value-res" id="name-ECDSAWithSHA384">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA384.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-228">ECDSAWithSHA384</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 11</span></div><div class="anchor value-res" id="name-ECDSAWithSHA512">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA512.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-229">ECDSAWithSHA512</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 12</span></div><div class="anchor value-res" id="name-Ed25519">	<span class="nodocs"><a href="../../use/crypto/x509..Ed25519.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-270">Ed25519</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 4</span></div><div class="anchor value-res" id="name-Expired">	<input type='checkbox' class="fold" id="Expired-fold-content"><label for="Expired-fold-content"><a href="../../use/crypto/x509..Expired.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-31">Expired</a> <a href="#name-InvalidReason">InvalidReason</a> = 1</label><span id='Expired-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-DSA">	<span class="nodocs"><a href="../../use/crypto/x509..DSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-268">DSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 2 // <span class="md-text">Only supported for parsing.</span></span></div><div class="anchor value-res" id="name-DSAWithSHA1">	<span class="nodocs"><a href="../../use/crypto/x509..DSAWithSHA1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-224">DSAWithSHA1</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 7 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-DSAWithSHA256">	<span class="nodocs"><a href="../../use/crypto/x509..DSAWithSHA256.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-225">DSAWithSHA256</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 8 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-ECDSA">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-269">ECDSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 3</span></div><div class="anchor value-res" id="name-ECDSAWithSHA1">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-226">ECDSAWithSHA1</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 9 // <span class="md-text">Only supported for signing, and verification of CRLs, CSRs, and OCSP responses.</span></span></div><div class="anchor value-res" id="name-ECDSAWithSHA256">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA256.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-227">ECDSAWithSHA256</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 10</span></div><div class="anchor value-res" id="name-ECDSAWithSHA384">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA384.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-228">ECDSAWithSHA384</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 11</span></div><div class="anchor value-res" id="name-ECDSAWithSHA512">	<span class="nodocs"><a href="../../use/crypto/x509..ECDSAWithSHA512.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-229">ECDSAWithSHA512</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 12</span></div><div class="anchor value-res" id="name-Ed25519">	<span class="nodocs"><a href="../../use/crypto/x509..Ed25519.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-270">Ed25519</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 4</span></div><div class="anchor value-res" id="name-Expired">	<input type='checkbox' class="fold" id="Expired-fold-content"><label for="Expired-fold-content"><a href="../../use/crypto/x509..Expired.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-33">Expired</a> <a href="#name-InvalidReason">InvalidReason</a> = 1</label><span id='Expired-fold-content-docs' class="fold-docs">
 <span class="md-text">		Expired results when a certificate has expired, based on the time
 		given in the VerifyOptions.</span>
 
-</span></div><div class="anchor value-res" id="name-ExtKeyUsageAny">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageAny.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-635">ExtKeyUsageAny</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 0 // <span class="md-text">anyExtendedKeyUsage</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageClientAuth">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageClientAuth.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-637">ExtKeyUsageClientAuth</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 2 // <span class="md-text">clientAuth</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-638">ExtKeyUsageCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 3 // <span class="md-text">codeSigning</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageEmailProtection">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageEmailProtection.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-639">ExtKeyUsageEmailProtection</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 4 // <span class="md-text">emailProtection</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECEndSystem">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECEndSystem.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-640">ExtKeyUsageIPSECEndSystem</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 5 // <span class="md-text">ipsecEndSystem</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECTunnel">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECTunnel.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-641">ExtKeyUsageIPSECTunnel</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 6 // <span class="md-text">ipsecTunnel</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECUser">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECUser.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-642">ExtKeyUsageIPSECUser</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 7 // <span class="md-text">ipsecUser</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftCommercialCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftCommercialCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-647">ExtKeyUsageMicrosoftCommercialCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 12 // <span class="md-text">msCodeCom</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftKernelCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftKernelCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-648">ExtKeyUsageMicrosoftKernelCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 13 // <span class="md-text">msKernelCode</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftServerGatedCrypto">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftServerGatedCrypto.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-645">ExtKeyUsageMicrosoftServerGatedCrypto</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 10 // <span class="md-text">msSGC</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageNetscapeServerGatedCrypto">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageNetscapeServerGatedCrypto.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-646">ExtKeyUsageNetscapeServerGatedCrypto</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 11 // <span class="md-text">nsSGC</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageOCSPSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageOCSPSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-644">ExtKeyUsageOCSPSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 9 // <span class="md-text">OCSPSigning</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageServerAuth">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageServerAuth.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-636">ExtKeyUsageServerAuth</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 1 // <span class="md-text">serverAuth</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageTimeStamping">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageTimeStamping.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-643">ExtKeyUsageTimeStamping</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 8 // <span class="md-text">timeStamping</span></span></div><div class="anchor value-res" id="name-IncompatibleUsage">	<input type='checkbox' class="fold" id="IncompatibleUsage-fold-content"><label for="IncompatibleUsage-fold-content"><a href="../../use/crypto/x509..IncompatibleUsage.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-41">IncompatibleUsage</a> <a href="#name-InvalidReason">InvalidReason</a> = 4</label><span id='IncompatibleUsage-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-ExtKeyUsageAny">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageAny.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-635">ExtKeyUsageAny</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 0 // <span class="md-text">anyExtendedKeyUsage</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageClientAuth">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageClientAuth.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-637">ExtKeyUsageClientAuth</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 2 // <span class="md-text">clientAuth</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-638">ExtKeyUsageCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 3 // <span class="md-text">codeSigning</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageEmailProtection">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageEmailProtection.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-639">ExtKeyUsageEmailProtection</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 4 // <span class="md-text">emailProtection</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECEndSystem">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECEndSystem.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-640">ExtKeyUsageIPSECEndSystem</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 5 // <span class="md-text">ipsecEndSystem</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECTunnel">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECTunnel.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-641">ExtKeyUsageIPSECTunnel</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 6 // <span class="md-text">ipsecTunnel</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageIPSECUser">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageIPSECUser.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-642">ExtKeyUsageIPSECUser</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 7 // <span class="md-text">ipsecUser</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftCommercialCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftCommercialCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-647">ExtKeyUsageMicrosoftCommercialCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 12 // <span class="md-text">msCodeCom</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftKernelCodeSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftKernelCodeSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-648">ExtKeyUsageMicrosoftKernelCodeSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 13 // <span class="md-text">msKernelCode</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageMicrosoftServerGatedCrypto">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageMicrosoftServerGatedCrypto.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-645">ExtKeyUsageMicrosoftServerGatedCrypto</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 10 // <span class="md-text">msSGC</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageNetscapeServerGatedCrypto">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageNetscapeServerGatedCrypto.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-646">ExtKeyUsageNetscapeServerGatedCrypto</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 11 // <span class="md-text">nsSGC</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageOCSPSigning">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageOCSPSigning.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-644">ExtKeyUsageOCSPSigning</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 9 // <span class="md-text">OCSPSigning</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageServerAuth">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageServerAuth.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-636">ExtKeyUsageServerAuth</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 1 // <span class="md-text">serverAuth</span></span></div><div class="anchor value-res" id="name-ExtKeyUsageTimeStamping">	<span class="nodocs"><a href="../../use/crypto/x509..ExtKeyUsageTimeStamping.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-643">ExtKeyUsageTimeStamping</a> <a href="#name-ExtKeyUsage">ExtKeyUsage</a> = 8 // <span class="md-text">timeStamping</span></span></div><div class="anchor value-res" id="name-IncompatibleUsage">	<input type='checkbox' class="fold" id="IncompatibleUsage-fold-content"><label for="IncompatibleUsage-fold-content"><a href="../../use/crypto/x509..IncompatibleUsage.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-43">IncompatibleUsage</a> <a href="#name-InvalidReason">InvalidReason</a> = 4</label><span id='IncompatibleUsage-fold-content-docs' class="fold-docs">
 <span class="md-text">		IncompatibleUsage results when the certificate's key usage indicates
 		that it may only be used for a different purpose.</span>
 
-</span></div><div class="anchor value-res" id="name-KeyUsageCertSign">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageCertSign.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-593">KeyUsageCertSign</a> <a href="#name-KeyUsage">KeyUsage</a> = 32 // <span class="md-text">keyCertSign</span></span></div><div class="anchor value-res" id="name-KeyUsageContentCommitment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageContentCommitment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-589">KeyUsageContentCommitment</a> <a href="#name-KeyUsage">KeyUsage</a> = 2 // <span class="md-text">contentCommitment</span></span></div><div class="anchor value-res" id="name-KeyUsageCRLSign">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageCRLSign.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-594">KeyUsageCRLSign</a> <a href="#name-KeyUsage">KeyUsage</a> = 64 // <span class="md-text">cRLSign</span></span></div><div class="anchor value-res" id="name-KeyUsageDataEncipherment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDataEncipherment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-591">KeyUsageDataEncipherment</a> <a href="#name-KeyUsage">KeyUsage</a> = 8 // <span class="md-text">dataEncipherment</span></span></div><div class="anchor value-res" id="name-KeyUsageDecipherOnly">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDecipherOnly.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-596">KeyUsageDecipherOnly</a> <a href="#name-KeyUsage">KeyUsage</a> = 256 // <span class="md-text">decipherOnly</span></span></div><div class="anchor value-res" id="name-KeyUsageDigitalSignature">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDigitalSignature.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-588">KeyUsageDigitalSignature</a> <a href="#name-KeyUsage">KeyUsage</a> = 1 // <span class="md-text">digitalSignature</span></span></div><div class="anchor value-res" id="name-KeyUsageEncipherOnly">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageEncipherOnly.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-595">KeyUsageEncipherOnly</a> <a href="#name-KeyUsage">KeyUsage</a> = 128 // <span class="md-text">encipherOnly</span></span></div><div class="anchor value-res" id="name-KeyUsageKeyAgreement">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageKeyAgreement.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-592">KeyUsageKeyAgreement</a> <a href="#name-KeyUsage">KeyUsage</a> = 16 // <span class="md-text">keyAgreement</span></span></div><div class="anchor value-res" id="name-KeyUsageKeyEncipherment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageKeyEncipherment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-590">KeyUsageKeyEncipherment</a> <a href="#name-KeyUsage">KeyUsage</a> = 4 // <span class="md-text">keyEncipherment</span></span></div><div class="anchor value-res" id="name-MD2WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..MD2WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-218">MD2WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 1 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-MD5WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..MD5WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-219">MD5WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 2 // <span class="md-text">Only supported for signing, not verification.</span></span></div><div class="anchor value-res" id="name-NameConstraintsWithoutSANs">	<input type='checkbox' class="fold" id="NameConstraintsWithoutSANs-fold-content"><label for="NameConstraintsWithoutSANs-fold-content"><a href="../../use/crypto/x509..NameConstraintsWithoutSANs.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-46">NameConstraintsWithoutSANs</a> <a href="#name-InvalidReason">InvalidReason</a> = 6</label><span id='NameConstraintsWithoutSANs-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-KeyUsageCertSign">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageCertSign.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-593">KeyUsageCertSign</a> <a href="#name-KeyUsage">KeyUsage</a> = 32 // <span class="md-text">keyCertSign</span></span></div><div class="anchor value-res" id="name-KeyUsageContentCommitment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageContentCommitment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-589">KeyUsageContentCommitment</a> <a href="#name-KeyUsage">KeyUsage</a> = 2 // <span class="md-text">contentCommitment</span></span></div><div class="anchor value-res" id="name-KeyUsageCRLSign">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageCRLSign.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-594">KeyUsageCRLSign</a> <a href="#name-KeyUsage">KeyUsage</a> = 64 // <span class="md-text">cRLSign</span></span></div><div class="anchor value-res" id="name-KeyUsageDataEncipherment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDataEncipherment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-591">KeyUsageDataEncipherment</a> <a href="#name-KeyUsage">KeyUsage</a> = 8 // <span class="md-text">dataEncipherment</span></span></div><div class="anchor value-res" id="name-KeyUsageDecipherOnly">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDecipherOnly.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-596">KeyUsageDecipherOnly</a> <a href="#name-KeyUsage">KeyUsage</a> = 256 // <span class="md-text">decipherOnly</span></span></div><div class="anchor value-res" id="name-KeyUsageDigitalSignature">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageDigitalSignature.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-588">KeyUsageDigitalSignature</a> <a href="#name-KeyUsage">KeyUsage</a> = 1 // <span class="md-text">digitalSignature</span></span></div><div class="anchor value-res" id="name-KeyUsageEncipherOnly">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageEncipherOnly.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-595">KeyUsageEncipherOnly</a> <a href="#name-KeyUsage">KeyUsage</a> = 128 // <span class="md-text">encipherOnly</span></span></div><div class="anchor value-res" id="name-KeyUsageKeyAgreement">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageKeyAgreement.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-592">KeyUsageKeyAgreement</a> <a href="#name-KeyUsage">KeyUsage</a> = 16 // <span class="md-text">keyAgreement</span></span></div><div class="anchor value-res" id="name-KeyUsageKeyEncipherment">	<span class="nodocs"><a href="../../use/crypto/x509..KeyUsageKeyEncipherment.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-590">KeyUsageKeyEncipherment</a> <a href="#name-KeyUsage">KeyUsage</a> = 4 // <span class="md-text">keyEncipherment</span></span></div><div class="anchor value-res" id="name-MD2WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..MD2WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-218">MD2WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 1 // <span class="md-text">Unsupported.</span></span></div><div class="anchor value-res" id="name-MD5WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..MD5WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-219">MD5WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 2 // <span class="md-text">Only supported for signing, not verification.</span></span></div><div class="anchor value-res" id="name-NameConstraintsWithoutSANs">	<input type='checkbox' class="fold" id="NameConstraintsWithoutSANs-fold-content"><label for="NameConstraintsWithoutSANs-fold-content"><a href="../../use/crypto/x509..NameConstraintsWithoutSANs.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-48">NameConstraintsWithoutSANs</a> <a href="#name-InvalidReason">InvalidReason</a> = 6</label><span id='NameConstraintsWithoutSANs-fold-content-docs' class="fold-docs">
 <span class="md-text">		NameConstraintsWithoutSANs is a legacy error and is no longer returned.</span>
 
-</span></div><div class="anchor value-res" id="name-NameMismatch">	<input type='checkbox' class="fold" id="NameMismatch-fold-content"><label for="NameMismatch-fold-content"><a href="../../use/crypto/x509..NameMismatch.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-44">NameMismatch</a> <a href="#name-InvalidReason">InvalidReason</a> = 5</label><span id='NameMismatch-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-NameMismatch">	<input type='checkbox' class="fold" id="NameMismatch-fold-content"><label for="NameMismatch-fold-content"><a href="../../use/crypto/x509..NameMismatch.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-46">NameMismatch</a> <a href="#name-InvalidReason">InvalidReason</a> = 5</label><span id='NameMismatch-fold-content-docs' class="fold-docs">
 <span class="md-text">		NameMismatch results when the subject name of a parent certificate
 		does not match the issuer name in the child.</span>
 
-</span></div><div class="anchor value-res" id="name-NotAuthorizedToSign">	<input type='checkbox' class="fold" id="NotAuthorizedToSign-fold-content"><label for="NotAuthorizedToSign-fold-content"><a href="../../use/crypto/x509..NotAuthorizedToSign.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-28">NotAuthorizedToSign</a> <a href="#name-InvalidReason">InvalidReason</a> = 0</label><span id='NotAuthorizedToSign-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-NotAuthorizedToSign">	<input type='checkbox' class="fold" id="NotAuthorizedToSign-fold-content"><label for="NotAuthorizedToSign-fold-content"><a href="../../use/crypto/x509..NotAuthorizedToSign.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-30">NotAuthorizedToSign</a> <a href="#name-InvalidReason">InvalidReason</a> = 0</label><span id='NotAuthorizedToSign-fold-content-docs' class="fold-docs">
 <span class="md-text">		NotAuthorizedToSign results when a certificate is signed by another
 		which isn't marked as a CA certificate.</span>
 
-</span></div><div class="anchor value-res" id="name-NoValidChains">	<input type='checkbox' class="fold" id="NoValidChains-fold-content"><label for="NoValidChains-fold-content"><a href="../../use/crypto/x509..NoValidChains.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-61">NoValidChains</a> <a href="#name-InvalidReason">InvalidReason</a> = 10</label><span id='NoValidChains-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-NoValidChains">	<input type='checkbox' class="fold" id="NoValidChains-fold-content"><label for="NoValidChains-fold-content"><a href="../../use/crypto/x509..NoValidChains.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-63">NoValidChains</a> <a href="#name-InvalidReason">InvalidReason</a> = 10</label><span id='NoValidChains-fold-content-docs' class="fold-docs">
 <span class="md-text">		NoValidChains results when there are no valid chains to return.</span>
 
 </span></div><div class="anchor value-res" id="name-PEMCipher3DES">	<input type='checkbox' class="fold" id="PEMCipher3DES-fold-content"><label for="PEMCipher3DES-fold-content"><a href="../../use/crypto/x509..PEMCipher3DES.html">const</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-29">PEMCipher3DES</a> <a href="#name-PEMCipher">PEMCipher</a> = 2</label><span id='PEMCipher3DES-fold-content-docs' class="fold-docs">
@@ -3431,18 +3441,18 @@
 </span></div><div class="anchor value-res" id="name-PEMCipherDES">	<input type='checkbox' class="fold" id="PEMCipherDES-fold-content"><label for="PEMCipherDES-fold-content"><a href="../../use/crypto/x509..PEMCipherDES.html">const</a> <a href="../../src/crypto/x509/pem_decrypt.go.html#line-28">PEMCipherDES</a> <a href="#name-PEMCipher">PEMCipher</a> = 1</label><span id='PEMCipherDES-fold-content-docs' class="fold-docs">
 <span class="md-text">		Possible values for the EncryptPEMBlock encryption algorithm.</span>
 
-</span></div><div class="anchor value-res" id="name-PureEd25519">	<span class="nodocs"><a href="../../use/crypto/x509..PureEd25519.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-233">PureEd25519</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 16</span></div><div class="anchor value-res" id="name-RSA">	<span class="nodocs"><a href="../../use/crypto/x509..RSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-267">RSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 1</span></div><div class="anchor value-res" id="name-SHA1WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA1WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-220">SHA1WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 3 // <span class="md-text">Only supported for signing, and verification of CRLs, CSRs, and OCSP responses.</span></span></div><div class="anchor value-res" id="name-SHA256WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA256WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-221">SHA256WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 4</span></div><div class="anchor value-res" id="name-SHA256WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA256WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-230">SHA256WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 13</span></div><div class="anchor value-res" id="name-SHA384WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA384WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-222">SHA384WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 5</span></div><div class="anchor value-res" id="name-SHA384WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA384WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-231">SHA384WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 14</span></div><div class="anchor value-res" id="name-SHA512WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA512WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-223">SHA512WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 6</span></div><div class="anchor value-res" id="name-SHA512WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA512WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-232">SHA512WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 15</span></div><div class="anchor value-res" id="name-TooManyConstraints">	<input type='checkbox' class="fold" id="TooManyConstraints-fold-content"><label for="TooManyConstraints-fold-content"><a href="../../use/crypto/x509..TooManyConstraints.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-56">TooManyConstraints</a> <a href="#name-InvalidReason">InvalidReason</a> = 8</label><span id='TooManyConstraints-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-PureEd25519">	<span class="nodocs"><a href="../../use/crypto/x509..PureEd25519.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-233">PureEd25519</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 16</span></div><div class="anchor value-res" id="name-RSA">	<span class="nodocs"><a href="../../use/crypto/x509..RSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-267">RSA</a> <a href="#name-PublicKeyAlgorithm">PublicKeyAlgorithm</a> = 1</span></div><div class="anchor value-res" id="name-SHA1WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA1WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-220">SHA1WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 3 // <span class="md-text">Only supported for signing, and verification of CRLs, CSRs, and OCSP responses.</span></span></div><div class="anchor value-res" id="name-SHA256WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA256WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-221">SHA256WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 4</span></div><div class="anchor value-res" id="name-SHA256WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA256WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-230">SHA256WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 13</span></div><div class="anchor value-res" id="name-SHA384WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA384WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-222">SHA384WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 5</span></div><div class="anchor value-res" id="name-SHA384WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA384WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-231">SHA384WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 14</span></div><div class="anchor value-res" id="name-SHA512WithRSA">	<span class="nodocs"><a href="../../use/crypto/x509..SHA512WithRSA.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-223">SHA512WithRSA</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 6</span></div><div class="anchor value-res" id="name-SHA512WithRSAPSS">	<span class="nodocs"><a href="../../use/crypto/x509..SHA512WithRSAPSS.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-232">SHA512WithRSAPSS</a> <a href="#name-SignatureAlgorithm">SignatureAlgorithm</a> = 15</span></div><div class="anchor value-res" id="name-TooManyConstraints">	<input type='checkbox' class="fold" id="TooManyConstraints-fold-content"><label for="TooManyConstraints-fold-content"><a href="../../use/crypto/x509..TooManyConstraints.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-58">TooManyConstraints</a> <a href="#name-InvalidReason">InvalidReason</a> = 8</label><span id='TooManyConstraints-fold-content-docs' class="fold-docs">
 <span class="md-text">		TooManyConstraints results when the number of comparison operations
 		needed to check a certificate exceeds the limit set by
 		VerifyOptions.MaxConstraintComparisions. This limit exists to
 		prevent pathological certificates can consuming excessive amounts of
 		CPU time to verify.</span>
 
-</span></div><div class="anchor value-res" id="name-TooManyIntermediates">	<input type='checkbox' class="fold" id="TooManyIntermediates-fold-content"><label for="TooManyIntermediates-fold-content"><a href="../../use/crypto/x509..TooManyIntermediates.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-38">TooManyIntermediates</a> <a href="#name-InvalidReason">InvalidReason</a> = 3</label><span id='TooManyIntermediates-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-TooManyIntermediates">	<input type='checkbox' class="fold" id="TooManyIntermediates-fold-content"><label for="TooManyIntermediates-fold-content"><a href="../../use/crypto/x509..TooManyIntermediates.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-40">TooManyIntermediates</a> <a href="#name-InvalidReason">InvalidReason</a> = 3</label><span id='TooManyIntermediates-fold-content-docs' class="fold-docs">
 <span class="md-text">		TooManyIntermediates results when a path length constraint is
 		violated.</span>
 
-</span></div><div class="anchor value-res" id="name-UnconstrainedName">	<input type='checkbox' class="fold" id="UnconstrainedName-fold-content"><label for="UnconstrainedName-fold-content"><a href="../../use/crypto/x509..UnconstrainedName.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-50">UnconstrainedName</a> <a href="#name-InvalidReason">InvalidReason</a> = 7</label><span id='UnconstrainedName-fold-content-docs' class="fold-docs">
+</span></div><div class="anchor value-res" id="name-UnconstrainedName">	<input type='checkbox' class="fold" id="UnconstrainedName-fold-content"><label for="UnconstrainedName-fold-content"><a href="../../use/crypto/x509..UnconstrainedName.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-52">UnconstrainedName</a> <a href="#name-InvalidReason">InvalidReason</a> = 7</label><span id='UnconstrainedName-fold-content-docs' class="fold-docs">
 <span class="md-text">		UnconstrainedName results when a CA certificate contains permitted
 		name constraints, but leaf certificate contains a name of an
 		unsupported or unconstrained type.</span>
@@ -3457,13 +3467,13 @@
 <span class="md-text">		certFileEnv is the environment variable which identifies where to locate
 		the SSL certificate file. If set this overrides the system default.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-ecPrivKeyVersion"><i>	<span class="nodocs"><a href="../../use/crypto/x509..ecPrivKeyVersion^8e28b.html">const</a> <a href="../../src/crypto/x509/sec1.go.html#line-16">ecPrivKeyVersion</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-intermediateCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..intermediateCertificate^859b0.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-245">intermediateCertificate</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-leafCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..leafCertificate^dccda.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-244">leafCertificate</a> = 0</span></i></div><div class="anchor value-res hidden" id="name-maxChainSignatureChecks"><i>	<input type='checkbox' class="fold" id="maxChainSignatureChecks-fold-content"><label for="maxChainSignatureChecks-fold-content"><a href="../../use/crypto/x509..maxChainSignatureChecks^d9aa7.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-721">maxChainSignatureChecks</a> = 100</label><span id='maxChainSignatureChecks-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-ecPrivKeyVersion"><i>	<span class="nodocs"><a href="../../use/crypto/x509..ecPrivKeyVersion^8e28b.html">const</a> <a href="../../src/crypto/x509/sec1.go.html#line-16">ecPrivKeyVersion</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-intermediateCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..intermediateCertificate^859b0.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-247">intermediateCertificate</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-leafCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..leafCertificate^dccda.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-246">leafCertificate</a> = 0</span></i></div><div class="anchor value-res hidden" id="name-maxChainSignatureChecks"><i>	<input type='checkbox' class="fold" id="maxChainSignatureChecks-fold-content"><label for="maxChainSignatureChecks-fold-content"><a href="../../use/crypto/x509..maxChainSignatureChecks^d9aa7.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-726">maxChainSignatureChecks</a> = 100</label><span id='maxChainSignatureChecks-fold-content-docs' class="fold-docs">
 <span class="md-text">		maxChainSignatureChecks is the maximum number of CheckSignatureFrom calls
 		that an invocation of buildChains will (transitively) make. Most chains are
 		less than 15 certificates long, so this leaves space for multiple chains and
 		for failed checks due to different intermediates having the same Subject.</span>
 
-</span></i></div><div class="anchor value-res hidden" id="name-nameTypeDNS"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeDNS^cf2c8.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1071">nameTypeDNS</a> = 2</span></i></div><div class="anchor value-res hidden" id="name-nameTypeEmail"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeEmail^8053e.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1070">nameTypeEmail</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-nameTypeIP"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeIP^fa3eb.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1073">nameTypeIP</a> = 7</span></i></div><div class="anchor value-res hidden" id="name-nameTypeURI"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeURI^d4ce1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1072">nameTypeURI</a> = 6</span></i></div><div class="anchor value-res hidden" id="name-rootCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..rootCertificate^fc5b1.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-246">rootCertificate</a> = 2</span></i></div><div class="anchor value-res hidden" id="name-x509v2Version"><i>	<input type='checkbox' class="fold" id="x509v2Version-fold-content"><label for="x509v2Version-fold-content"><a href="../../use/crypto/x509..x509v2Version^cc041.html">const</a> <a href="../../src/crypto/x509/parser.go.html#line-1104">x509v2Version</a> = 1</label><span id='x509v2Version-fold-content-docs' class="fold-docs">
+</span></i></div><div class="anchor value-res hidden" id="name-nameTypeDNS"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeDNS^cf2c8.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1071">nameTypeDNS</a> = 2</span></i></div><div class="anchor value-res hidden" id="name-nameTypeEmail"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeEmail^8053e.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1070">nameTypeEmail</a> = 1</span></i></div><div class="anchor value-res hidden" id="name-nameTypeIP"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeIP^fa3eb.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1073">nameTypeIP</a> = 7</span></i></div><div class="anchor value-res hidden" id="name-nameTypeURI"><i>	<span class="nodocs"><a href="../../use/crypto/x509..nameTypeURI^d4ce1.html">const</a> <a href="../../src/crypto/x509/x509.go.html#line-1072">nameTypeURI</a> = 6</span></i></div><div class="anchor value-res hidden" id="name-rootCertificate"><i>	<span class="nodocs"><a href="../../use/crypto/x509..rootCertificate^fc5b1.html">const</a> <a href="../../src/crypto/x509/verify.go.html#line-248">rootCertificate</a> = 2</span></i></div><div class="anchor value-res hidden" id="name-x509v2Version"><i>	<input type='checkbox' class="fold" id="x509v2Version-fold-content"><label for="x509v2Version-fold-content"><a href="../../use/crypto/x509..x509v2Version^cc041.html">const</a> <a href="../../src/crypto/x509/parser.go.html#line-1104">x509v2Version</a> = 1</label><span id='x509v2Version-fold-content-docs' class="fold-docs">
 <span class="md-text">		The X.509 standards confusingly 1-indexed the version names, but 0-indexed
 		the actual encoded version, so the version for X.509v2 is 1.</span>
 
diff --git a/pkg/golang.org/x/sys/cpu.html b/pkg/golang.org/x/sys/cpu.html
index 5539422749b..8b208e24113 100644
--- a/pkg/golang.org/x/sys/cpu.html
+++ b/pkg/golang.org/x/sys/cpu.html
@@ -53,8 +53,8 @@
 <span class="md-text">		byteOrder is a subset of encoding/binary.ByteOrder.</span>
 
 		<input type='checkbox' class="fold" id="byteOrder-fold-methods"><label for="byteOrder-fold-methods">Methods (<i>total 2, both are exported</i>)</label><span id='byteOrder-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( byteOrder) <a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a>([]<a href="../../../builtin.html#name-byte">byte</a>) <a href="../../../builtin.html#name-uint32">uint32</a></span></span><span>
-			<span class="nodocs">( byteOrder) <a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a>([]<a href="../../../builtin.html#name-byte">byte</a>) <a href="../../../builtin.html#name-uint64">uint64</a></span></span></span>
+			<span class="nodocs">( byteOrder) <a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a>([]<a href="../../../builtin.html#name-byte">byte</a>) <a href="../../../builtin.html#name-uint32">uint32</a></span></span><span>
+			<span class="nodocs">( byteOrder) <a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a>([]<a href="../../../builtin.html#name-byte">byte</a>) <a href="../../../builtin.html#name-uint64">uint64</a></span></span></span>
 		<input type='checkbox' class="fold" id="byteOrder-fold-impledby"><label for="byteOrder-fold-impledby">Implemented By (<i>at least 9, in which 1 is exported</i>)</label><span id='byteOrder-fold-impledby-items' class="fold-items"><span>
 			 encoding/binary.<a href="../../../encoding/binary.html#name-ByteOrder">ByteOrder</a> <i>(interface)</i></span>
 			<input type='checkbox' checked class="showhide" id="byteOrder-showhide-impedBys"><i><label for="byteOrder-showhide-impedBys" class="show-inline">/* 8+ unexporteds ... */</label><label for="byteOrder-showhide-impedBys" class="hide-inline">/* 8+ unexporteds: */</label></i><span class="hidden"><i>
@@ -87,15 +87,15 @@
 <span class="md-text">		Option names should be lower case. e.g. avx instead of AVX.</span>
 
 		<input type='checkbox' class="fold" id="option-fold-fields"><label for="option-fold-fields">Fields (<i>total 5, all are exported</i>)</label><span id='option-fold-fields-items' class="fold-items"><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Enable"><label for="option-fold-field-Enable"><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">Enable</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Enable-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="option-fold-field-Enable"><label for="option-fold-field-Enable"><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">Enable</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Enable-docs' class="fold-docs">
 <span class="md-text">				// whether feature should be enabled</span>
 </span></span><span>
-			<span class="nodocs"><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">Feature</a> <i>*<a href="../../../builtin.html#name-bool">bool</a></i></span></span><span>
-			<span class="nodocs"><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">Name</a> <i><a href="../../../builtin.html#name-string">string</a></i></span></span><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Required"><label for="option-fold-field-Required"><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">Required</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Required-docs' class="fold-docs">
+			<span class="nodocs"><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">Feature</a> <i>*<a href="../../../builtin.html#name-bool">bool</a></i></span></span><span>
+			<span class="nodocs"><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">Name</a> <i><a href="../../../builtin.html#name-string">string</a></i></span></span><span>
+			<input type='checkbox' class="fold" id="option-fold-field-Required"><label for="option-fold-field-Required"><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">Required</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Required-docs' class="fold-docs">
 <span class="md-text">				// whether feature is mandatory and can not be disabled</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Specified"><label for="option-fold-field-Specified"><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">Specified</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Specified-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="option-fold-field-Specified"><label for="option-fold-field-Specified"><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">Specified</a> <i><a href="../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Specified-docs' class="fold-docs">
 <span class="md-text">				// whether feature value was specified in GODEBUG</span>
 </span></span></span>
 
diff --git a/pkg/vendor/golang.org/x/sys/cpu.html b/pkg/vendor/golang.org/x/sys/cpu.html
index b9fb07c73ae..7d2d7e7ee9f 100644
--- a/pkg/vendor/golang.org/x/sys/cpu.html
+++ b/pkg/vendor/golang.org/x/sys/cpu.html
@@ -53,8 +53,8 @@
 <span class="md-text">		byteOrder is a subset of encoding/binary.ByteOrder.</span>
 
 		<input type='checkbox' class="fold" id="byteOrder-fold-methods"><label for="byteOrder-fold-methods">Methods (<i>total 2, both are exported</i>)</label><span id='byteOrder-fold-methods-items' class="fold-items"><span>
-			<span class="nodocs">( byteOrder) <a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a>([]<a href="../../../../builtin.html#name-byte">byte</a>) <a href="../../../../builtin.html#name-uint32">uint32</a></span></span><span>
-			<span class="nodocs">( byteOrder) <a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a>([]<a href="../../../../builtin.html#name-byte">byte</a>) <a href="../../../../builtin.html#name-uint64">uint64</a></span></span></span>
+			<span class="nodocs">( byteOrder) <a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a>([]<a href="../../../../builtin.html#name-byte">byte</a>) <a href="../../../../builtin.html#name-uint32">uint32</a></span></span><span>
+			<span class="nodocs">( byteOrder) <a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a>([]<a href="../../../../builtin.html#name-byte">byte</a>) <a href="../../../../builtin.html#name-uint64">uint64</a></span></span></span>
 		<input type='checkbox' class="fold" id="byteOrder-fold-impledby"><label for="byteOrder-fold-impledby">Implemented By (<i>at least 9, in which 1 is exported</i>)</label><span id='byteOrder-fold-impledby-items' class="fold-items"><span>
 			 encoding/binary.<a href="../../../../encoding/binary.html#name-ByteOrder">ByteOrder</a> <i>(interface)</i></span>
 			<input type='checkbox' checked class="showhide" id="byteOrder-showhide-impedBys"><i><label for="byteOrder-showhide-impedBys" class="show-inline">/* 8+ unexporteds ... */</label><label for="byteOrder-showhide-impedBys" class="hide-inline">/* 8+ unexporteds: */</label></i><span class="hidden"><i>
@@ -87,15 +87,15 @@
 <span class="md-text">		Option names should be lower case. e.g. avx instead of AVX.</span>
 
 		<input type='checkbox' class="fold" id="option-fold-fields"><label for="option-fold-fields">Fields (<i>total 5, all are exported</i>)</label><span id='option-fold-fields-items' class="fold-items"><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Enable"><label for="option-fold-field-Enable"><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">Enable</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Enable-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="option-fold-field-Enable"><label for="option-fold-field-Enable"><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">Enable</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Enable-docs' class="fold-docs">
 <span class="md-text">				// whether feature should be enabled</span>
 </span></span><span>
-			<span class="nodocs"><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">Feature</a> <i>*<a href="../../../../builtin.html#name-bool">bool</a></i></span></span><span>
-			<span class="nodocs"><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">Name</a> <i><a href="../../../../builtin.html#name-string">string</a></i></span></span><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Required"><label for="option-fold-field-Required"><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">Required</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Required-docs' class="fold-docs">
+			<span class="nodocs"><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">Feature</a> <i>*<a href="../../../../builtin.html#name-bool">bool</a></i></span></span><span>
+			<span class="nodocs"><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">Name</a> <i><a href="../../../../builtin.html#name-string">string</a></i></span></span><span>
+			<input type='checkbox' class="fold" id="option-fold-field-Required"><label for="option-fold-field-Required"><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">Required</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Required-docs' class="fold-docs">
 <span class="md-text">				// whether feature is mandatory and can not be disabled</span>
 </span></span><span>
-			<input type='checkbox' class="fold" id="option-fold-field-Specified"><label for="option-fold-field-Specified"><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">Specified</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Specified-docs' class="fold-docs">
+			<input type='checkbox' class="fold" id="option-fold-field-Specified"><label for="option-fold-field-Specified"><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">Specified</a> <i><a href="../../../../builtin.html#name-bool">bool</a></i></label><span id='option-fold-field-Specified-docs' class="fold-docs">
 <span class="md-text">				// whether feature value was specified in GODEBUG</span>
 </span></span></span>
 
diff --git a/src/crypto/tls/common.go.html b/src/crypto/tls/common.go.html
index 17c5147f7be..b37bb73504c 100644
--- a/src/crypto/tls/common.go.html
+++ b/src/crypto/tls/common.go.html
@@ -1928,7 +1928,7 @@
 <span class="codeline" id="line-1390"><code>		<span class="keyword">if</span> <label for="r113" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1391"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i13">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"failed to parse certificate: %w"</span>, <label for="r113" class="ident">err</label>)</code></span>
 <span class="codeline" id="line-1392"><code>		}</code></span>
-<span class="codeline" id="line-1393"><code>		<span class="keyword">if</span> <label for="r114" class="ident">err</label> := <label for="r112" class="ident">x509Cert</label>.<a href="../x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r106" class="ident">chi</label>.<a href="#line-443" class="ident">ServerName</a>); <label for="r114" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1393"><code>		<span class="keyword">if</span> <label for="r114" class="ident">err</label> := <label for="r112" class="ident">x509Cert</label>.<a href="../x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r106" class="ident">chi</label>.<a href="#line-443" class="ident">ServerName</a>); <label for="r114" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1394"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i13">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"certificate is not valid for requested server name: %w"</span>, <label for="r114" class="ident">err</label>)</code></span>
 <span class="codeline" id="line-1395"><code>		}</code></span>
 <span class="codeline" id="line-1396"><code>	}</code></span>
@@ -2402,13 +2402,13 @@
 <span class="codeline" id="line-1864"><code><span class="comment">// is valid, as indicated by none of the certificates being expired and the root</span></code></span>
 <span class="codeline" id="line-1865"><code><span class="comment">// being in opts.Roots (or in the system root pool if opts.Roots is nil). If</span></code></span>
 <span class="codeline" id="line-1866"><code><span class="comment">// verifiedChains is empty, it returns false.</span></code></span>
-<span class="codeline" id="line-1867"><code><span class="keyword">func</span> <label for="r221" class="ident"><a href="../../../pkg/crypto/tls.html#name-anyValidVerifiedChain" class="ident">anyValidVerifiedChain</a></label>(<label for="r222" class="ident">verifiedChains</label> [][]*<a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/x509.go.html#line-704" class="ident">Certificate</a>, <label for="r223" class="ident">opts</label> <a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-1867"><code><span class="keyword">func</span> <label for="r221" class="ident"><a href="../../../pkg/crypto/tls.html#name-anyValidVerifiedChain" class="ident">anyValidVerifiedChain</a></label>(<label for="r222" class="ident">verifiedChains</label> [][]*<a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/x509.go.html#line-704" class="ident">Certificate</a>, <label for="r223" class="ident">opts</label> <a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
 <span class="codeline" id="line-1868"><code>	<span class="keyword">for</span> <label for="r224" class="ident">_</label>, <label for="r225" class="ident">chain</label> := <span class="keyword">range</span> <label for="r222" class="ident">verifiedChains</label> {</code></span>
 <span class="codeline" id="line-1869"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r225" class="ident">chain</label>) == <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-1870"><code>			<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-1871"><code>		}</code></span>
 <span class="codeline" id="line-1872"><code>		<span class="keyword">if</span> <a href="../../../pkg/slices.html" class="ident i18">slices</a>.<a href="../../slices/slices.go.html#line-123" class="ident">ContainsFunc</a>(<label for="r225" class="ident">chain</label>, <span class="keyword">func</span>(<label for="r226" class="ident">cert</label> *<a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-1873"><code>			<span class="keyword">return</span> <label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>.<a href="../../time/time.go.html#line-281" class="ident">Before</a>(<label for="r226" class="ident">cert</label>.<a href="../x509/x509.go.html#line-721" class="ident">NotBefore</a>) || <label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>.<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r226" class="ident">cert</label>.<a href="../x509/x509.go.html#line-721" class="ident">NotAfter</a>)</code></span>
+<span class="codeline" id="line-1873"><code>			<span class="keyword">return</span> <label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>.<a href="../../time/time.go.html#line-281" class="ident">Before</a>(<label for="r226" class="ident">cert</label>.<a href="../x509/x509.go.html#line-721" class="ident">NotBefore</a>) || <label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>.<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r226" class="ident">cert</label>.<a href="../x509/x509.go.html#line-721" class="ident">NotAfter</a>)</code></span>
 <span class="codeline" id="line-1874"><code>		}) {</code></span>
 <span class="codeline" id="line-1875"><code>			<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-1876"><code>		}</code></span>
@@ -2420,17 +2420,17 @@
 <span class="codeline" id="line-1882"><code><span class="comment">		// because EKU handling might differ. We will want to replace this with</span></code></span>
 <span class="codeline" id="line-1883"><code><span class="comment">		// CertPool.Contains if/once that is available. See go.dev/issue/77376.</span></code></span>
 <span class="codeline" id="line-1884"><code>		<span class="keyword">if</span> <a href="../../../pkg/runtime.html" class="ident i17">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"windows"</span> || <a href="../../../pkg/runtime.html" class="ident i17">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"darwin"</span> || <a href="../../../pkg/runtime.html" class="ident i17">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"ios"</span> {</code></span>
-<span class="codeline" id="line-1885"><code>			<label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a> = <a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>()</code></span>
+<span class="codeline" id="line-1885"><code>			<label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a> = <a href="../../../pkg/crypto/x509.html" class="ident i11">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>()</code></span>
 <span class="codeline" id="line-1886"><code>			<span class="keyword">for</span> <label for="r227" class="ident">_</label>, <label for="r228" class="ident">cert</label> := <span class="keyword">range</span> <label for="r225" class="ident">chain</label>[<span class="lit-number">1</span>:<a href="../../../pkg/builtin.html#name-max" class="ident">max</a>(<span class="lit-number">1</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r225" class="ident">chain</label>)-<span class="lit-number">1</span>)] {</code></span>
-<span class="codeline" id="line-1887"><code>				<label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r228" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-1887"><code>				<label for="r223" class="ident">opts</label>.<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r228" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-1888"><code>			}</code></span>
 <span class="codeline" id="line-1889"><code>			<label for="r229" class="ident">leaf</label> := <label for="r225" class="ident">chain</label>[<span class="lit-number">0</span>]</code></span>
-<span class="codeline" id="line-1890"><code>			<span class="keyword">if</span> <label for="r230" class="ident">_</label>, <label for="r231" class="ident">err</label> := <label for="r229" class="ident">leaf</label>.<a href="../x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r223" class="ident">opts</label>); <label for="r231" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1890"><code>			<span class="keyword">if</span> <label for="r230" class="ident">_</label>, <label for="r231" class="ident">err</label> := <label for="r229" class="ident">leaf</label>.<a href="../x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r223" class="ident">opts</label>); <label for="r231" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1891"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
 <span class="codeline" id="line-1892"><code>			}</code></span>
 <span class="codeline" id="line-1893"><code>		} <span class="keyword">else</span> {</code></span>
 <span class="codeline" id="line-1894"><code>			<label for="r232" class="ident">root</label> := <label for="r225" class="ident">chain</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r225" class="ident">chain</label>)-<span class="lit-number">1</span>]</code></span>
-<span class="codeline" id="line-1895"><code>			<span class="keyword">if</span> <label for="r233" class="ident">_</label>, <label for="r234" class="ident">err</label> := <label for="r232" class="ident">root</label>.<a href="../x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r223" class="ident">opts</label>); <label for="r234" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1895"><code>			<span class="keyword">if</span> <label for="r233" class="ident">_</label>, <label for="r234" class="ident">err</label> := <label for="r232" class="ident">root</label>.<a href="../x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r223" class="ident">opts</label>); <label for="r234" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1896"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
 <span class="codeline" id="line-1897"><code>			}</code></span>
 <span class="codeline" id="line-1898"><code>		}</code></span>
diff --git a/src/crypto/tls/conn.go.html b/src/crypto/tls/conn.go.html
index 72ce0058b46..3ec5e18ab48 100644
--- a/src/crypto/tls/conn.go.html
+++ b/src/crypto/tls/conn.go.html
@@ -2383,7 +2383,7 @@
 <span class="codeline" id="line-1677"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r314" class="ident">c</label>.<a href="#line-60" class="ident">verifiedChains</a>) == <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-1678"><code>		<span class="keyword">return</span> <a href="../../../pkg/errors.html" class="ident i5">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"tls: handshake did not verify certificate chain"</span>)</code></span>
 <span class="codeline" id="line-1679"><code>	}</code></span>
-<span class="codeline" id="line-1680"><code>	<span class="keyword">return</span> <label for="r314" class="ident">c</label>.<a href="#line-57" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r316" class="ident">host</label>)</code></span>
+<span class="codeline" id="line-1680"><code>	<span class="keyword">return</span> <label for="r314" class="ident">c</label>.<a href="#line-57" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r316" class="ident">host</label>)</code></span>
 <span class="codeline" id="line-1681"><code>}</code></span>
 <span class="codeline" id="line-1682"><code></code></span>
 <span class="codeline" id="line-1683"><code><span class="comment">// setReadTrafficSecret sets the read traffic secret for the given encryption level. If</span></code></span>
diff --git a/src/crypto/tls/handshake_client.go.html b/src/crypto/tls/handshake_client.go.html
index 344f885f421..c6df79d39d6 100644
--- a/src/crypto/tls/handshake_client.go.html
+++ b/src/crypto/tls/handshake_client.go.html
@@ -1041,15 +1041,15 @@
 <span class="codeline" id="line-411"><code>			<span class="comment">// The original connection had InsecureSkipVerify, while this doesn't.</span></code></span>
 <span class="codeline" id="line-412"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-413"><code>		}</code></span>
-<span class="codeline" id="line-414"><code>		<span class="keyword">if</span> <label for="r72" class="ident">err</label> := <label for="r61" class="ident">session</label>.<a href="ticket.go.html#line-90" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-696" class="ident">ServerName</a>); <label for="r72" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-414"><code>		<span class="keyword">if</span> <label for="r72" class="ident">err</label> := <label for="r61" class="ident">session</label>.<a href="ticket.go.html#line-90" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-696" class="ident">ServerName</a>); <label for="r72" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-415"><code>			<span class="comment">// This should be ensured by the cache key, but protect the</span></code></span>
 <span class="codeline" id="line-416"><code><span class="comment">			// application from a faulty ClientSessionCache implementation.</span></code></span>
 <span class="codeline" id="line-417"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-418"><code>		}</code></span>
-<span class="codeline" id="line-419"><code>		<label for="r73" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-420"><code>			<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>: <label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-421"><code>			<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:       <label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
-<span class="codeline" id="line-422"><code>			<a href="../x509/verify.go.html#line-212" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/x509.go.html#line-636" class="ident">ExtKeyUsageServerAuth</a>},</code></span>
+<span class="codeline" id="line-419"><code>		<label for="r73" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-420"><code>			<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>: <label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-421"><code>			<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:       <label for="r58" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
+<span class="codeline" id="line-422"><code>			<a href="../x509/verify.go.html#line-214" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/x509.go.html#line-636" class="ident">ExtKeyUsageServerAuth</a>},</code></span>
 <span class="codeline" id="line-423"><code>		}</code></span>
 <span class="codeline" id="line-424"><code>		<span class="keyword">if</span> !<a href="common.go.html#line-1867" class="ident">anyValidVerifiedChain</a>(<label for="r61" class="ident">session</label>.<a href="ticket.go.html#line-93" class="ident">verifiedChains</a>, <label for="r73" class="ident">opts</label>) {</code></span>
 <span class="codeline" id="line-425"><code>			<span class="comment">// No valid chains, delete the entry.</span></code></span>
@@ -1762,17 +1762,17 @@
 <span class="codeline" id="line-1132"><code>				<span class="keyword">return</span> <label for="r236" class="ident">err</label></code></span>
 <span class="codeline" id="line-1133"><code>			}</code></span>
 <span class="codeline" id="line-1134"><code>		} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-1135"><code>			<label for="r237" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-1136"><code>				<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:         <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
-<span class="codeline" id="line-1137"><code>				<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>:   <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-1138"><code>				<a href="../x509/verify.go.html#line-195" class="ident">DNSName</a>:       <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-62" class="ident">serverName</a>,</code></span>
-<span class="codeline" id="line-1139"><code>				<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-1135"><code>			<label for="r237" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-1136"><code>				<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:         <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
+<span class="codeline" id="line-1137"><code>				<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>:   <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-1138"><code>				<a href="../x509/verify.go.html#line-197" class="ident">DNSName</a>:       <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-62" class="ident">serverName</a>,</code></span>
+<span class="codeline" id="line-1139"><code>				<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
 <span class="codeline" id="line-1140"><code>			}</code></span>
 <span class="codeline" id="line-1141"><code></code></span>
 <span class="codeline" id="line-1142"><code>			<span class="keyword">for</span> <label for="r238" class="ident">_</label>, <label for="r239" class="ident">cert</label> := <span class="keyword">range</span> <label for="r227" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-1143"><code>				<label for="r237" class="ident">opts</label>.<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r239" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-1143"><code>				<label for="r237" class="ident">opts</label>.<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r239" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-1144"><code>			}</code></span>
-<span class="codeline" id="line-1145"><code>			<label for="r240" class="ident">chains</label>, <label for="r241" class="ident">err</label> := <label for="r227" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r237" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-1145"><code>			<label for="r240" class="ident">chains</label>, <label for="r241" class="ident">err</label> := <label for="r227" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r237" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-1146"><code>			<span class="keyword">if</span> <label for="r241" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1147"><code>				<label for="r224" class="ident">c</label>.<a href="conn.go.html#line-865" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
 <span class="codeline" id="line-1148"><code>				<span class="keyword">return</span> &amp;<a href="common.go.html#line-1810" class="ident">CertificateVerificationError</a>{<a href="common.go.html#line-1812" class="ident">UnverifiedCertificates</a>: <label for="r227" class="ident">certs</label>, <a href="common.go.html#line-1813" class="ident">Err</a>: <label for="r241" class="ident">err</label>}</code></span>
@@ -1785,17 +1785,17 @@
 <span class="codeline" id="line-1155"><code>			}</code></span>
 <span class="codeline" id="line-1156"><code>		}</code></span>
 <span class="codeline" id="line-1157"><code>	} <span class="keyword">else</span> <span class="keyword">if</span> !<label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-713" class="ident">InsecureSkipVerify</a> {</code></span>
-<span class="codeline" id="line-1158"><code>		<label for="r242" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-1159"><code>			<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:         <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
-<span class="codeline" id="line-1160"><code>			<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>:   <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-1161"><code>			<a href="../x509/verify.go.html#line-195" class="ident">DNSName</a>:       <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-696" class="ident">ServerName</a>,</code></span>
-<span class="codeline" id="line-1162"><code>			<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-1158"><code>		<label for="r242" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-1159"><code>			<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:         <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-682" class="ident">RootCAs</a>,</code></span>
+<span class="codeline" id="line-1160"><code>			<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>:   <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-1161"><code>			<a href="../x509/verify.go.html#line-197" class="ident">DNSName</a>:       <label for="r224" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-696" class="ident">ServerName</a>,</code></span>
+<span class="codeline" id="line-1162"><code>			<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i10">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
 <span class="codeline" id="line-1163"><code>		}</code></span>
 <span class="codeline" id="line-1164"><code></code></span>
 <span class="codeline" id="line-1165"><code>		<span class="keyword">for</span> <label for="r243" class="ident">_</label>, <label for="r244" class="ident">cert</label> := <span class="keyword">range</span> <label for="r227" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-1166"><code>			<label for="r242" class="ident">opts</label>.<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r244" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-1166"><code>			<label for="r242" class="ident">opts</label>.<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r244" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-1167"><code>		}</code></span>
-<span class="codeline" id="line-1168"><code>		<label for="r245" class="ident">chains</label>, <label for="r246" class="ident">err</label> := <label for="r227" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r242" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-1168"><code>		<label for="r245" class="ident">chains</label>, <label for="r246" class="ident">err</label> := <label for="r227" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r242" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-1169"><code>		<span class="keyword">if</span> <label for="r246" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1170"><code>			<label for="r224" class="ident">c</label>.<a href="conn.go.html#line-865" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
 <span class="codeline" id="line-1171"><code>			<span class="keyword">return</span> &amp;<a href="common.go.html#line-1810" class="ident">CertificateVerificationError</a>{<a href="common.go.html#line-1812" class="ident">UnverifiedCertificates</a>: <label for="r227" class="ident">certs</label>, <a href="common.go.html#line-1813" class="ident">Err</a>: <label for="r246" class="ident">err</label>}</code></span>
diff --git a/src/crypto/tls/handshake_server.go.html b/src/crypto/tls/handshake_server.go.html
index 35b964f1a97..1fc75853512 100644
--- a/src/crypto/tls/handshake_server.go.html
+++ b/src/crypto/tls/handshake_server.go.html
@@ -1017,10 +1017,10 @@
 <span class="codeline" id="line-523"><code>	<span class="keyword">if</span> <label for="r100" class="ident">sessionHasClientCerts</label> &amp;&amp; <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>().<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r89" class="ident">sessionState</label>.<a href="ticket.go.html#line-90" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/x509.go.html#line-721" class="ident">NotAfter</a>) {</code></span>
 <span class="codeline" id="line-524"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-525"><code>	}</code></span>
-<span class="codeline" id="line-526"><code>	<label for="r102" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-527"><code>		<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>: <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-528"><code>		<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:       <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
-<span class="codeline" id="line-529"><code>		<a href="../x509/verify.go.html#line-212" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
+<span class="codeline" id="line-526"><code>	<label for="r102" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-527"><code>		<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>: <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-528"><code>		<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:       <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
+<span class="codeline" id="line-529"><code>		<a href="../x509/verify.go.html#line-214" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
 <span class="codeline" id="line-530"><code>	}</code></span>
 <span class="codeline" id="line-531"><code>	<span class="keyword">if</span> <label for="r100" class="ident">sessionHasClientCerts</label> &amp;&amp; <label for="r88" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-700" class="ident">ClientAuth</a> &gt;= <a href="common.go.html#line-367" class="ident">VerifyClientCertIfGiven</a> &amp;&amp;</code></span>
 <span class="codeline" id="line-532"><code>		!<a href="common.go.html#line-1867" class="ident">anyValidVerifiedChain</a>(<label for="r89" class="ident">sessionState</label>.<a href="ticket.go.html#line-93" class="ident">verifiedChains</a>, <label for="r102" class="ident">opts</label>) {</code></span>
@@ -1465,22 +1465,22 @@
 <span class="codeline" id="line-971"><code>	}</code></span>
 <span class="codeline" id="line-972"><code></code></span>
 <span class="codeline" id="line-973"><code>	<span class="keyword">if</span> <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-700" class="ident">ClientAuth</a> &gt;= <a href="common.go.html#line-367" class="ident">VerifyClientCertIfGiven</a> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r201" class="ident">certs</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-974"><code>		<label for="r208" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-975"><code>			<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:         <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
-<span class="codeline" id="line-976"><code>			<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>:   <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-977"><code>			<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
-<span class="codeline" id="line-978"><code>			<a href="../x509/verify.go.html#line-212" class="ident">KeyUsages</a>:     []<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
+<span class="codeline" id="line-974"><code>		<label for="r208" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-975"><code>			<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:         <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
+<span class="codeline" id="line-976"><code>			<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>:   <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-977"><code>			<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-978"><code>			<a href="../x509/verify.go.html#line-214" class="ident">KeyUsages</a>:     []<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
 <span class="codeline" id="line-979"><code>		}</code></span>
 <span class="codeline" id="line-980"><code></code></span>
 <span class="codeline" id="line-981"><code>		<span class="keyword">for</span> <label for="r209" class="ident">_</label>, <label for="r210" class="ident">cert</label> := <span class="keyword">range</span> <label for="r201" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-982"><code>			<label for="r208" class="ident">opts</label>.<a href="../x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r210" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-982"><code>			<label for="r208" class="ident">opts</label>.<a href="../x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r210" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-983"><code>		}</code></span>
 <span class="codeline" id="line-984"><code></code></span>
-<span class="codeline" id="line-985"><code>		<label for="r211" class="ident">chains</label>, <label for="r212" class="ident">err</label> := <label for="r201" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r208" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-985"><code>		<label for="r211" class="ident">chains</label>, <label for="r212" class="ident">err</label> := <label for="r201" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r208" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-986"><code>		<span class="keyword">if</span> <label for="r212" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-987"><code>			<span class="keyword">if</span> <label for="r213" class="ident">_</label>, <label for="r214" class="ident">ok</label> := <a href="../../../pkg/errors.html" class="ident i8">errors</a>.<a href="../../errors/wrap.go.html#line-167" class="ident">AsType</a>[<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-146" class="ident">UnknownAuthorityError</a>](<label for="r212" class="ident">err</label>); <label for="r214" class="ident">ok</label> {</code></span>
+<span class="codeline" id="line-987"><code>			<span class="keyword">if</span> <label for="r213" class="ident">_</label>, <label for="r214" class="ident">ok</label> := <a href="../../../pkg/errors.html" class="ident i8">errors</a>.<a href="../../errors/wrap.go.html#line-167" class="ident">AsType</a>[<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-148" class="ident">UnknownAuthorityError</a>](<label for="r212" class="ident">err</label>); <label for="r214" class="ident">ok</label> {</code></span>
 <span class="codeline" id="line-988"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-865" class="ident">sendAlert</a>(<a href="alert.go.html#line-41" class="ident">alertUnknownCA</a>)</code></span>
-<span class="codeline" id="line-989"><code>			} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r215" class="ident">errCertificateInvalid</label>, <label for="r216" class="ident">ok</label> := <a href="../../../pkg/errors.html" class="ident i8">errors</a>.<a href="../../errors/wrap.go.html#line-167" class="ident">AsType</a>[<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-66" class="ident">CertificateInvalidError</a>](<label for="r212" class="ident">err</label>); <label for="r216" class="ident">ok</label> &amp;&amp; <label for="r215" class="ident">errCertificateInvalid</label>.<a href="../x509/verify.go.html#line-68" class="ident">Reason</a> == <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-31" class="ident">Expired</a> {</code></span>
+<span class="codeline" id="line-989"><code>			} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r215" class="ident">errCertificateInvalid</label>, <label for="r216" class="ident">ok</label> := <a href="../../../pkg/errors.html" class="ident i8">errors</a>.<a href="../../errors/wrap.go.html#line-167" class="ident">AsType</a>[<a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-68" class="ident">CertificateInvalidError</a>](<label for="r212" class="ident">err</label>); <label for="r216" class="ident">ok</label> &amp;&amp; <label for="r215" class="ident">errCertificateInvalid</label>.<a href="../x509/verify.go.html#line-70" class="ident">Reason</a> == <a href="../../../pkg/crypto/x509.html" class="ident i7">x509</a>.<a href="../x509/verify.go.html#line-33" class="ident">Expired</a> {</code></span>
 <span class="codeline" id="line-990"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-865" class="ident">sendAlert</a>(<a href="alert.go.html#line-38" class="ident">alertCertificateExpired</a>)</code></span>
 <span class="codeline" id="line-991"><code>			} <span class="keyword">else</span> {</code></span>
 <span class="codeline" id="line-992"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-865" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
diff --git a/src/crypto/tls/handshake_server_tls13.go.html b/src/crypto/tls/handshake_server_tls13.go.html
index 3355627aef4..28108b5cce0 100644
--- a/src/crypto/tls/handshake_server_tls13.go.html
+++ b/src/crypto/tls/handshake_server_tls13.go.html
@@ -916,10 +916,10 @@
 <span class="codeline" id="line-370"><code>		<span class="keyword">if</span> <label for="r58" class="ident">sessionHasClientCerts</label> &amp;&amp; <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>().<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r52" class="ident">sessionState</label>.<a href="ticket.go.html#line-90" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../x509/x509.go.html#line-721" class="ident">NotAfter</a>) {</code></span>
 <span class="codeline" id="line-371"><code>			<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-372"><code>		}</code></span>
-<span class="codeline" id="line-373"><code>		<label for="r60" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-374"><code>			<a href="../x509/verify.go.html#line-207" class="ident">CurrentTime</a>: <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-375"><code>			<a href="../x509/verify.go.html#line-203" class="ident">Roots</a>:       <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
-<span class="codeline" id="line-376"><code>			<a href="../x509/verify.go.html#line-212" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
+<span class="codeline" id="line-373"><code>		<label for="r60" class="ident">opts</label> := <a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-374"><code>			<a href="../x509/verify.go.html#line-209" class="ident">CurrentTime</a>: <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-1175" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-375"><code>			<a href="../x509/verify.go.html#line-205" class="ident">Roots</a>:       <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-705" class="ident">ClientCAs</a>,</code></span>
+<span class="codeline" id="line-376"><code>			<a href="../x509/verify.go.html#line-214" class="ident">KeyUsages</a>:   []<a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../pkg/crypto/x509.html" class="ident i9">x509</a>.<a href="../x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
 <span class="codeline" id="line-377"><code>		}</code></span>
 <span class="codeline" id="line-378"><code>		<span class="keyword">if</span> <label for="r58" class="ident">sessionHasClientCerts</label> &amp;&amp; <label for="r46" class="ident">c</label>.<a href="conn.go.html#line-44" class="ident">config</a>.<a href="common.go.html#line-700" class="ident">ClientAuth</a> &gt;= <a href="common.go.html#line-367" class="ident">VerifyClientCertIfGiven</a> &amp;&amp;</code></span>
 <span class="codeline" id="line-379"><code>			!<a href="common.go.html#line-1867" class="ident">anyValidVerifiedChain</a>(<label for="r52" class="ident">sessionState</label>.<a href="ticket.go.html#line-93" class="ident">verifiedChains</a>, <label for="r60" class="ident">opts</label>) {</code></span>
diff --git a/src/crypto/x509/constraints.go.html b/src/crypto/x509/constraints.go.html
index 90d6120b40b..21254f38330 100644
--- a/src/crypto/x509/constraints.go.html
+++ b/src/crypto/x509/constraints.go.html
@@ -781,23 +781,23 @@
 <span class="codeline" id="line-395"><code><span class="comment">	// domain portion of the rfc2821Mailbox has been lowercased, since the</span></code></span>
 <span class="codeline" id="line-396"><code><span class="comment">	// domain portion is case insensitive. When checking the map for an email,</span></code></span>
 <span class="codeline" id="line-397"><code><span class="comment">	// the domain portion of the query should also be lowercased.</span></code></span>
-<span class="codeline" id="line-398"><code>	<a href="../../../use/crypto/x509..emailConstraints^b5796.fullEmails^af34f.html" class="ident">fullEmails</a> <span class="keyword">map</span>[<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>]<span class="keyword">struct</span>{}</code></span>
+<span class="codeline" id="line-398"><code>	<a href="../../../use/crypto/x509..emailConstraints^b5796.fullEmails^af34f.html" class="ident">fullEmails</a> <span class="keyword">map</span>[<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>]<span class="keyword">struct</span>{}</code></span>
 <span class="codeline" id="line-399"><code>}</code></span>
 <span class="codeline" id="line-400"><code></code></span>
 <span class="codeline" id="line-401"><code><span class="keyword">func</span> <label for="r91" class="ident"><a href="../../../pkg/crypto/x509.html#name-newEmailConstraints" class="ident">newEmailConstraints</a></label>(<label for="r92" class="ident">l</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r93" class="ident">permitted</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) <span class="keyword">interface</span> {</code></span>
-<span class="codeline" id="line-402"><code>	<label for="r94" class="ident">query</label>(<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>) (<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>)</code></span>
+<span class="codeline" id="line-402"><code>	<label for="r94" class="ident">query</label>(<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>) (<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>)</code></span>
 <span class="codeline" id="line-403"><code>} {</code></span>
 <span class="codeline" id="line-404"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r92" class="ident">l</label>) == <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-405"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-406"><code>	}</code></span>
-<span class="codeline" id="line-407"><code>	<label for="r95" class="ident">exactMap</label> := <span class="keyword">map</span>[<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>]<span class="keyword">struct</span>{}{}</code></span>
+<span class="codeline" id="line-407"><code>	<label for="r95" class="ident">exactMap</label> := <span class="keyword">map</span>[<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>]<span class="keyword">struct</span>{}{}</code></span>
 <span class="codeline" id="line-408"><code>	<span class="keyword">var</span> <label for="r96" class="ident">domains</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
 <span class="codeline" id="line-409"><code>	<span class="keyword">for</span> <label for="r97" class="ident">_</label>, <label for="r98" class="ident">c</label> := <span class="keyword">range</span> <label for="r92" class="ident">l</label> {</code></span>
 <span class="codeline" id="line-410"><code>		<span class="keyword">if</span> !<a href="../../../pkg/strings.html" class="ident i6">strings</a>.<a href="../../strings/strings.go.html#line-72" class="ident">ContainsRune</a>(<label for="r98" class="ident">c</label>, <span class="lit-number">'@'</span>) {</code></span>
 <span class="codeline" id="line-411"><code>			<label for="r96" class="ident">domains</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r96" class="ident">domains</label>, <label for="r98" class="ident">c</label>)</code></span>
 <span class="codeline" id="line-412"><code>			<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-413"><code>		}</code></span>
-<span class="codeline" id="line-414"><code>		<label for="r99" class="ident">parsed</label>, <label for="r100" class="ident">ok</label> := <a href="verify.go.html#line-264" class="ident">parseRFC2821Mailbox</a>(<label for="r98" class="ident">c</label>)</code></span>
+<span class="codeline" id="line-414"><code>		<label for="r99" class="ident">parsed</label>, <label for="r100" class="ident">ok</label> := <a href="verify.go.html#line-266" class="ident">parseRFC2821Mailbox</a>(<label for="r98" class="ident">c</label>)</code></span>
 <span class="codeline" id="line-415"><code>		<span class="keyword">if</span> !<label for="r100" class="ident">ok</label> {</code></span>
 <span class="codeline" id="line-416"><code>			<span class="comment">// We've already parsed these addresses in parseCertificate, and</span></code></span>
 <span class="codeline" id="line-417"><code><span class="comment">			// treat failures as a hard failure for parsing. The only way we can</span></code></span>
@@ -805,7 +805,7 @@
 <span class="codeline" id="line-419"><code><span class="comment">			// certificate since parsing.</span></code></span>
 <span class="codeline" id="line-420"><code>			<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-421"><code>		}</code></span>
-<span class="codeline" id="line-422"><code>		<label for="r99" class="ident">parsed</label>.<a href="verify.go.html#line-253" class="ident">domain</a> = <a href="../../../pkg/strings.html" class="ident i6">strings</a>.<a href="../../strings/strings.go.html#line-727" class="ident">ToLower</a>(<label for="r99" class="ident">parsed</label>.<a href="verify.go.html#line-253" class="ident">domain</a>)</code></span>
+<span class="codeline" id="line-422"><code>		<label for="r99" class="ident">parsed</label>.<a href="verify.go.html#line-255" class="ident">domain</a> = <a href="../../../pkg/strings.html" class="ident i6">strings</a>.<a href="../../strings/strings.go.html#line-727" class="ident">ToLower</a>(<label for="r99" class="ident">parsed</label>.<a href="verify.go.html#line-255" class="ident">domain</a>)</code></span>
 <span class="codeline" id="line-423"><code>		<label for="r95" class="ident">exactMap</label>[<label for="r99" class="ident">parsed</label>] = <span class="keyword">struct</span>{}{}</code></span>
 <span class="codeline" id="line-424"><code>	}</code></span>
 <span class="codeline" id="line-425"><code>	<label for="r101" class="ident">ec</label> := &amp;<a href="#line-389" class="ident">emailConstraints</a>{</code></span>
@@ -817,16 +817,16 @@
 <span class="codeline" id="line-431"><code>	<span class="keyword">return</span> <label for="r101" class="ident">ec</label></code></span>
 <span class="codeline" id="line-432"><code>}</code></span>
 <span class="codeline" id="line-433"><code></code></span>
-<span class="codeline" id="line-434"><code><span class="keyword">func</span> (<label for="r102" class="ident">ec</label> *<a href="#line-389" class="ident">emailConstraints</a>) <label for="r103" class="ident"><a href="../../../use/crypto/x509..emailConstraints^b5796.query^a8b77.html" class="ident">query</a></label>(<label for="r104" class="ident">s</label> <a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>) (<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
+<span class="codeline" id="line-434"><code><span class="keyword">func</span> (<label for="r102" class="ident">ec</label> *<a href="#line-389" class="ident">emailConstraints</a>) <label for="r103" class="ident"><a href="../../../use/crypto/x509..emailConstraints^b5796.query^a8b77.html" class="ident">query</a></label>(<label for="r104" class="ident">s</label> <a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>) (<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
 <span class="codeline" id="line-435"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r102" class="ident">ec</label>.<a href="#line-398" class="ident">fullEmails</a>) &gt; <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-436"><code>		<span class="keyword">if</span> <label for="r105" class="ident">_</label>, <label for="r106" class="ident">ok</label> := <label for="r102" class="ident">ec</label>.<a href="#line-398" class="ident">fullEmails</a>[<label for="r104" class="ident">s</label>]; <label for="r106" class="ident">ok</label> {</code></span>
-<span class="codeline" id="line-437"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i1">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s@%s"</span>, <label for="r104" class="ident">s</label>.<a href="verify.go.html#line-253" class="ident">local</a>, <label for="r104" class="ident">s</label>.<a href="verify.go.html#line-253" class="ident">domain</a>), <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-437"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i1">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s@%s"</span>, <label for="r104" class="ident">s</label>.<a href="verify.go.html#line-255" class="ident">local</a>, <label for="r104" class="ident">s</label>.<a href="verify.go.html#line-255" class="ident">domain</a>), <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
 <span class="codeline" id="line-438"><code>		}</code></span>
 <span class="codeline" id="line-439"><code>	}</code></span>
 <span class="codeline" id="line-440"><code>	<span class="keyword">if</span> <label for="r102" class="ident">ec</label>.<a href="#line-390" class="ident">dnsConstraints</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-441"><code>		<span class="keyword">return</span> <span class="lit-string">""</span>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
 <span class="codeline" id="line-442"><code>	}</code></span>
-<span class="codeline" id="line-443"><code>	<label for="r107" class="ident">constraint</label>, <label for="r108" class="ident">found</label> := <label for="r102" class="ident">ec</label>.<a href="#line-390" class="ident">dnsConstraints</a>.<a href="#line-390" class="ident">query</a>(<label for="r104" class="ident">s</label>.<a href="verify.go.html#line-253" class="ident">domain</a>)</code></span>
+<span class="codeline" id="line-443"><code>	<label for="r107" class="ident">constraint</label>, <label for="r108" class="ident">found</label> := <label for="r102" class="ident">ec</label>.<a href="#line-390" class="ident">dnsConstraints</a>.<a href="#line-390" class="ident">query</a>(<label for="r104" class="ident">s</label>.<a href="verify.go.html#line-255" class="ident">domain</a>)</code></span>
 <span class="codeline" id="line-444"><code>	<span class="keyword">return</span> <label for="r107" class="ident">constraint</label>, <label for="r108" class="ident">found</label></code></span>
 <span class="codeline" id="line-445"><code>}</code></span>
 <span class="codeline" id="line-446"><code></code></span>
@@ -836,7 +836,7 @@
 <span class="codeline" id="line-450"><code>	<a href="../../../use/crypto/x509..constraints^e2250.excluded^cfa5a.html" class="ident">excluded</a>       <span class="keyword">interface</span>{ query(<label for="r110" class="ident">V</label>) (<label for="r109" class="ident">T</label>, <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) }</code></span>
 <span class="codeline" id="line-451"><code>}</code></span>
 <span class="codeline" id="line-452"><code></code></span>
-<span class="codeline" id="line-453"><code><span class="keyword">func</span> <label for="r111" class="ident"><a href="../../../pkg/crypto/x509.html#name-checkConstraints" class="ident">checkConstraints</a></label>[<label for="r112" class="ident">T</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> | *<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-46" class="ident">IPNet</a>, <label for="r113" class="ident">V</label> <a href="../../../pkg/builtin.html#name-any" class="ident">any</a>, <label for="r114" class="ident">P</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> | <a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a> | <a href="#line-568" class="ident">parsedURI</a> | <a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>](<label for="r115" class="ident">c</label> <a href="#line-447" class="ident">constraints</a>[<label for="r112" class="ident">T</label>, <label for="r113" class="ident">V</label>], <label for="r116" class="ident">s</label> <label for="r113" class="ident">V</label>, <label for="r117" class="ident">p</label> <label for="r114" class="ident">P</label>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
+<span class="codeline" id="line-453"><code><span class="keyword">func</span> <label for="r111" class="ident"><a href="../../../pkg/crypto/x509.html#name-checkConstraints" class="ident">checkConstraints</a></label>[<label for="r112" class="ident">T</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> | *<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-46" class="ident">IPNet</a>, <label for="r113" class="ident">V</label> <a href="../../../pkg/builtin.html#name-any" class="ident">any</a>, <label for="r114" class="ident">P</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> | <a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a> | <a href="#line-568" class="ident">parsedURI</a> | <a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>](<label for="r115" class="ident">c</label> <a href="#line-447" class="ident">constraints</a>[<label for="r112" class="ident">T</label>, <label for="r113" class="ident">V</label>], <label for="r116" class="ident">s</label> <label for="r113" class="ident">V</label>, <label for="r117" class="ident">p</label> <label for="r114" class="ident">P</label>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
 <span class="codeline" id="line-454"><code>	<span class="keyword">if</span> <label for="r115" class="ident">c</label>.<a href="#line-449" class="ident">permitted</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-455"><code>		<span class="keyword">if</span> <label for="r118" class="ident">_</label>, <label for="r119" class="ident">found</label> := <label for="r115" class="ident">c</label>.<a href="#line-449" class="ident">permitted</a>.<a href="#line-449" class="ident">query</a>(<label for="r116" class="ident">s</label>); !<label for="r119" class="ident">found</label> {</code></span>
 <span class="codeline" id="line-456"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i1">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"%s %q is not permitted by any constraint"</span>, <label for="r115" class="ident">c</label>.<a href="#line-448" class="ident">constraintType</a>, <label for="r117" class="ident">p</label>)</code></span>
@@ -854,13 +854,13 @@
 <span class="codeline" id="line-468"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.ip^bb9af.html" class="ident">ip</a>    <a href="#line-447" class="ident">constraints</a>[*<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-46" class="ident">IPNet</a>, <a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a>]</code></span>
 <span class="codeline" id="line-469"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.dns^dd75a.html" class="ident">dns</a>   <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]</code></span>
 <span class="codeline" id="line-470"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.uri^70e5d.html" class="ident">uri</a>   <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]</code></span>
-<span class="codeline" id="line-471"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.email^82244.html" class="ident">email</a> <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>]</code></span>
+<span class="codeline" id="line-471"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.email^82244.html" class="ident">email</a> <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>]</code></span>
 <span class="codeline" id="line-472"><code></code></span>
 <span class="codeline" id="line-473"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.index^1bc04.html" class="ident">index</a> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
 <span class="codeline" id="line-474"><code>	<a href="../../../use/crypto/x509..chainConstraints^171e0.next^c6c1c.html" class="ident">next</a>  *<a href="#line-467" class="ident">chainConstraints</a></code></span>
 <span class="codeline" id="line-475"><code>}</code></span>
 <span class="codeline" id="line-476"><code></code></span>
-<span class="codeline" id="line-477"><code><span class="keyword">func</span> (<label for="r122" class="ident">cc</label> *<a href="#line-467" class="ident">chainConstraints</a>) <label for="r123" class="ident"><a href="../../../use/crypto/x509..chainConstraints^171e0.check^20f65.html" class="ident">check</a></label>(<label for="r124" class="ident">dns</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r125" class="ident">uris</label> []<a href="#line-568" class="ident">parsedURI</a>, <label for="r126" class="ident">emails</label> []<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>, <label for="r127" class="ident">ips</label> []<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
+<span class="codeline" id="line-477"><code><span class="keyword">func</span> (<label for="r122" class="ident">cc</label> *<a href="#line-467" class="ident">chainConstraints</a>) <label for="r123" class="ident"><a href="../../../use/crypto/x509..chainConstraints^171e0.check^20f65.html" class="ident">check</a></label>(<label for="r124" class="ident">dns</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r125" class="ident">uris</label> []<a href="#line-568" class="ident">parsedURI</a>, <label for="r126" class="ident">emails</label> []<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>, <label for="r127" class="ident">ips</label> []<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
 <span class="codeline" id="line-478"><code>	<span class="keyword">for</span> <label for="r128" class="ident">_</label>, <label for="r129" class="ident">ip</label> := <span class="keyword">range</span> <label for="r127" class="ident">ips</label> {</code></span>
 <span class="codeline" id="line-479"><code>		<span class="keyword">if</span> <label for="r130" class="ident">err</label> := <a href="#line-453" class="ident">checkConstraints</a>(<label for="r122" class="ident">cc</label>.<a href="#line-468" class="ident">ip</a>, <label for="r129" class="ident">ip</label>, <label for="r129" class="ident">ip</label>); <label for="r130" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-480"><code>			<span class="keyword">return</span> <label for="r130" class="ident">err</label></code></span>
@@ -883,7 +883,7 @@
 <span class="codeline" id="line-497"><code>		}</code></span>
 <span class="codeline" id="line-498"><code>	}</code></span>
 <span class="codeline" id="line-499"><code>	<span class="keyword">for</span> <label for="r137" class="ident">_</label>, <label for="r138" class="ident">e</label> := <span class="keyword">range</span> <label for="r126" class="ident">emails</label> {</code></span>
-<span class="codeline" id="line-500"><code>		<span class="keyword">if</span> !<a href="parser.go.html#line-1292" class="ident">domainNameValid</a>(<label for="r138" class="ident">e</label>.<a href="verify.go.html#line-253" class="ident">domain</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>) {</code></span>
+<span class="codeline" id="line-500"><code>		<span class="keyword">if</span> !<a href="parser.go.html#line-1292" class="ident">domainNameValid</a>(<label for="r138" class="ident">e</label>.<a href="verify.go.html#line-255" class="ident">domain</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>) {</code></span>
 <span class="codeline" id="line-501"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i1">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"x509: cannot parse rfc822Name %q"</span>, <label for="r138" class="ident">e</label>)</code></span>
 <span class="codeline" id="line-502"><code>		}</code></span>
 <span class="codeline" id="line-503"><code>		<span class="keyword">if</span> <label for="r139" class="ident">err</label> := <a href="#line-453" class="ident">checkConstraints</a>(<label for="r122" class="ident">cc</label>.<a href="#line-471" class="ident">email</a>, <label for="r138" class="ident">e</label>, <label for="r138" class="ident">e</label>); <label for="r139" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
@@ -904,7 +904,7 @@
 <span class="codeline" id="line-518"><code>			<a href="#line-468" class="ident">ip</a>:    <a href="#line-447" class="ident">constraints</a>[*<a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-46" class="ident">IPNet</a>, <a href="../../../pkg/net.html" class="ident i2">net</a>.<a href="../../net/ip.go.html#line-37" class="ident">IP</a>]{<span class="lit-string">"IP address"</span>, <a href="#line-164" class="ident">newIPNetConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-792" class="ident">PermittedIPRanges</a>), <a href="#line-164" class="ident">newIPNetConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-793" class="ident">ExcludedIPRanges</a>)},</code></span>
 <span class="codeline" id="line-519"><code>			<a href="#line-469" class="ident">dns</a>:   <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]{<span class="lit-string">"DNS name"</span>, <a href="#line-331" class="ident">newDNSConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-790" class="ident">PermittedDNSDomains</a>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>), <a href="#line-331" class="ident">newDNSConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-791" class="ident">ExcludedDNSDomains</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>)},</code></span>
 <span class="codeline" id="line-520"><code>			<a href="#line-470" class="ident">uri</a>:   <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]{<span class="lit-string">"URI"</span>, <a href="#line-331" class="ident">newDNSConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-796" class="ident">PermittedURIDomains</a>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>), <a href="#line-331" class="ident">newDNSConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-797" class="ident">ExcludedURIDomains</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>)},</code></span>
-<span class="codeline" id="line-521"><code>			<a href="#line-471" class="ident">email</a>: <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>]{<span class="lit-string">"email address"</span>, <a href="#line-401" class="ident">newEmailConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-794" class="ident">PermittedEmailAddresses</a>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>), <a href="#line-401" class="ident">newEmailConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-795" class="ident">ExcludedEmailAddresses</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>)},</code></span>
+<span class="codeline" id="line-521"><code>			<a href="#line-471" class="ident">email</a>: <a href="#line-447" class="ident">constraints</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>]{<span class="lit-string">"email address"</span>, <a href="#line-401" class="ident">newEmailConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-794" class="ident">PermittedEmailAddresses</a>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>), <a href="#line-401" class="ident">newEmailConstraints</a>(<label for="r145" class="ident">c</label>.<a href="x509.go.html#line-795" class="ident">ExcludedEmailAddresses</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>)},</code></span>
 <span class="codeline" id="line-522"><code>			<a href="#line-473" class="ident">index</a>: <label for="r144" class="ident">i</label>,</code></span>
 <span class="codeline" id="line-523"><code>		}</code></span>
 <span class="codeline" id="line-524"><code>		<span class="keyword">if</span> <label for="r142" class="ident">currentConstraints</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
@@ -987,14 +987,14 @@
 <span class="codeline" id="line-601"><code>	<span class="keyword">return</span> <label for="r158" class="ident">parsed</label>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-602"><code>}</code></span>
 <span class="codeline" id="line-603"><code></code></span>
-<span class="codeline" id="line-604"><code><span class="keyword">func</span> <label for="r165" class="ident"><a href="../../../pkg/crypto/x509.html#name-parseMailboxes" class="ident">parseMailboxes</a></label>(<label for="r166" class="ident">emails</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) ([]<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>, <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
-<span class="codeline" id="line-605"><code>	<label for="r167" class="ident">parsed</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="verify.go.html#line-252" class="ident">rfc2821Mailbox</a>, <span class="lit-number">0</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r166" class="ident">emails</label>))</code></span>
+<span class="codeline" id="line-604"><code><span class="keyword">func</span> <label for="r165" class="ident"><a href="../../../pkg/crypto/x509.html#name-parseMailboxes" class="ident">parseMailboxes</a></label>(<label for="r166" class="ident">emails</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) ([]<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>, <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
+<span class="codeline" id="line-605"><code>	<label for="r167" class="ident">parsed</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="verify.go.html#line-254" class="ident">rfc2821Mailbox</a>, <span class="lit-number">0</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r166" class="ident">emails</label>))</code></span>
 <span class="codeline" id="line-606"><code>	<span class="keyword">for</span> <label for="r168" class="ident">_</label>, <label for="r169" class="ident">email</label> := <span class="keyword">range</span> <label for="r166" class="ident">emails</label> {</code></span>
-<span class="codeline" id="line-607"><code>		<label for="r170" class="ident">mailbox</label>, <label for="r171" class="ident">ok</label> := <a href="verify.go.html#line-264" class="ident">parseRFC2821Mailbox</a>(<label for="r169" class="ident">email</label>)</code></span>
+<span class="codeline" id="line-607"><code>		<label for="r170" class="ident">mailbox</label>, <label for="r171" class="ident">ok</label> := <a href="verify.go.html#line-266" class="ident">parseRFC2821Mailbox</a>(<label for="r169" class="ident">email</label>)</code></span>
 <span class="codeline" id="line-608"><code>		<span class="keyword">if</span> !<label for="r171" class="ident">ok</label> {</code></span>
 <span class="codeline" id="line-609"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/fmt.html" class="ident i1">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"cannot parse rfc822Name %q"</span>, <label for="r169" class="ident">email</label>)</code></span>
 <span class="codeline" id="line-610"><code>		}</code></span>
-<span class="codeline" id="line-611"><code>		<label for="r170" class="ident">mailbox</label>.<a href="verify.go.html#line-253" class="ident">domain</a> = <a href="../../../pkg/strings.html" class="ident i6">strings</a>.<a href="../../strings/strings.go.html#line-727" class="ident">ToLower</a>(<label for="r170" class="ident">mailbox</label>.<a href="verify.go.html#line-253" class="ident">domain</a>)</code></span>
+<span class="codeline" id="line-611"><code>		<label for="r170" class="ident">mailbox</label>.<a href="verify.go.html#line-255" class="ident">domain</a> = <a href="../../../pkg/strings.html" class="ident i6">strings</a>.<a href="../../strings/strings.go.html#line-727" class="ident">ToLower</a>(<label for="r170" class="ident">mailbox</label>.<a href="verify.go.html#line-255" class="ident">domain</a>)</code></span>
 <span class="codeline" id="line-612"><code>		<label for="r167" class="ident">parsed</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r167" class="ident">parsed</label>, <label for="r170" class="ident">mailbox</label>)</code></span>
 <span class="codeline" id="line-613"><code>	}</code></span>
 <span class="codeline" id="line-614"><code>	<span class="keyword">return</span> <label for="r167" class="ident">parsed</label>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
diff --git a/src/crypto/x509/parser.go.html b/src/crypto/x509/parser.go.html
index c250bd48fc2..04e5168e36f 100644
--- a/src/crypto/x509/parser.go.html
+++ b/src/crypto/x509/parser.go.html
@@ -1195,7 +1195,7 @@
 <span class="codeline" id="line-625"><code>				<span class="comment">// If the constraint contains an @ then</span></code></span>
 <span class="codeline" id="line-626"><code><span class="comment">				// it specifies an exact mailbox name.</span></code></span>
 <span class="codeline" id="line-627"><code>				<span class="keyword">if</span> <a href="../../../pkg/strings.html" class="ident i16">strings</a>.<a href="../../strings/strings.go.html#line-62" class="ident">Contains</a>(<label for="r147" class="ident">constraint</label>, <span class="lit-string">"@"</span>) {</code></span>
-<span class="codeline" id="line-628"><code>					<span class="keyword">if</span> <label for="r149" class="ident">_</label>, <label for="r150" class="ident">ok</label> := <a href="verify.go.html#line-264" class="ident">parseRFC2821Mailbox</a>(<label for="r147" class="ident">constraint</label>); !<label for="r150" class="ident">ok</label> {</code></span>
+<span class="codeline" id="line-628"><code>					<span class="keyword">if</span> <label for="r149" class="ident">_</label>, <label for="r150" class="ident">ok</label> := <a href="verify.go.html#line-266" class="ident">parseRFC2821Mailbox</a>(<label for="r147" class="ident">constraint</label>); !<label for="r150" class="ident">ok</label> {</code></span>
 <span class="codeline" id="line-629"><code>						<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/fmt.html" class="ident i9">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"x509: failed to parse rfc822Name constraint %q"</span>, <label for="r147" class="ident">constraint</label>)</code></span>
 <span class="codeline" id="line-630"><code>					}</code></span>
 <span class="codeline" id="line-631"><code>				} <span class="keyword">else</span> {</code></span>
diff --git a/src/crypto/x509/root_unix.go.html b/src/crypto/x509/root_unix.go.html
index 11ab1cb3ce9..48cad471fa9 100644
--- a/src/crypto/x509/root_unix.go.html
+++ b/src/crypto/x509/root_unix.go.html
@@ -127,7 +127,7 @@
 <span class="codeline" id="line-25"><code>	<a href="../../../pkg/crypto/x509.html#name-certDirEnv" class="ident">certDirEnv</a> = <span class="lit-string">"SSL_CERT_DIR"</span></code></span>
 <span class="codeline" id="line-26"><code>)</code></span>
 <span class="codeline" id="line-27"><code></code></span>
-<span class="codeline" id="line-28"><code><span class="keyword">func</span> (<label for="r0" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r1" class="ident"><a href="../../../use/crypto/x509..Certificate.systemVerify^8b54b.html" class="ident">systemVerify</a></label>(<label for="r2" class="ident">opts</label> *<a href="verify.go.html#line-192" class="ident">VerifyOptions</a>) (<label for="r3" class="ident">chains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r4" class="ident">err</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
+<span class="codeline" id="line-28"><code><span class="keyword">func</span> (<label for="r0" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r1" class="ident"><a href="../../../use/crypto/x509..Certificate.systemVerify^8b54b.html" class="ident">systemVerify</a></label>(<label for="r2" class="ident">opts</label> *<a href="verify.go.html#line-194" class="ident">VerifyOptions</a>) (<label for="r3" class="ident">chains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r4" class="ident">err</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
 <span class="codeline" id="line-29"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-30"><code>}</code></span>
 <span class="codeline" id="line-31"><code></code></span>
diff --git a/src/crypto/x509/verify.go.html b/src/crypto/x509/verify.go.html
index 531c29752c7..00e55c2deac 100644
--- a/src/crypto/x509/verify.go.html
+++ b/src/crypto/x509/verify.go.html
@@ -278,7 +278,14 @@
 input[id=r259]:checked ~pre label[for=r259],
 input[id=r260]:checked ~pre label[for=r260],
 input[id=r261]:checked ~pre label[for=r261],
-input[id=r262]:checked ~pre label[for=r262]
+input[id=r262]:checked ~pre label[for=r262],
+input[id=r263]:checked ~pre label[for=r263],
+input[id=r264]:checked ~pre label[for=r264],
+input[id=r265]:checked ~pre label[for=r265],
+input[id=r266]:checked ~pre label[for=r266],
+input[id=r267]:checked ~pre label[for=r267],
+input[id=r268]:checked ~pre label[for=r268],
+input[id=r269]:checked ~pre label[for=r269]
 {background: #226; color: #ff8;}
 input[id=i0]:checked ~pre .i0,
 input[id=i1]:checked ~pre .i1,
@@ -292,7 +299,9 @@
 input[id=i9]:checked ~pre .i9,
 input[id=i10]:checked ~pre .i10,
 input[id=i11]:checked ~pre .i11,
-input[id=i12]:checked ~pre .i12
+input[id=i12]:checked ~pre .i12,
+input[id=i13]:checked ~pre .i13,
+input[id=i14]:checked ~pre .i14
 {background: brown; color: #eed;}
 </style><input id="r0" type="radio" name="g"/>
 <input id="r1" type="radio" name="g"/>
@@ -557,6 +566,13 @@
 <input id="r260" type="radio" name="g"/>
 <input id="r261" type="radio" name="g"/>
 <input id="r262" type="radio" name="g"/>
+<input id="r263" type="radio" name="g"/>
+<input id="r264" type="radio" name="g"/>
+<input id="r265" type="radio" name="g"/>
+<input id="r266" type="radio" name="g"/>
+<input id="r267" type="radio" name="g"/>
+<input id="r268" type="radio" name="g"/>
+<input id="r269" type="radio" name="g"/>
 <input id="i0" type="radio" name="i"/>
 <input id="i1" type="radio" name="i"/>
 <input id="i2" type="radio" name="i"/>
@@ -570,6 +586,8 @@
 <input id="i10" type="radio" name="i"/>
 <input id="i11" type="radio" name="i"/>
 <input id="i12" type="radio" name="i"/>
+<input id="i13" type="radio" name="i"/>
+<input id="i14" type="radio" name="i"/>
 
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Copyright 2011 The Go Authors. All rights reserved.</span></code></span>
@@ -581,1396 +599,1427 @@
 <span class="codeline" id="line-7"><code><span class="keyword">import</span> (</code></span>
 <span class="codeline" id="line-8"><code>	<label for="i0"><span class="lit-string i0">"bytes"</span></label></code></span>
 <span class="codeline" id="line-9"><code>	<label for="i1"><span class="lit-string i1">"crypto"</span></label></code></span>
-<span class="codeline" id="line-10"><code>	<label for="i2"><span class="lit-string i2">"crypto/x509/pkix"</span></label></code></span>
-<span class="codeline" id="line-11"><code>	<label for="i3"><span class="lit-string i3">"errors"</span></label></code></span>
-<span class="codeline" id="line-12"><code>	<label for="i4"><span class="lit-string i4">"fmt"</span></label></code></span>
-<span class="codeline" id="line-13"><code>	<label for="i5"><span class="lit-string i5">"iter"</span></label></code></span>
-<span class="codeline" id="line-14"><code>	<label for="i6"><span class="lit-string i6">"maps"</span></label></code></span>
-<span class="codeline" id="line-15"><code>	<label for="i7"><span class="lit-string i7">"net"</span></label></code></span>
-<span class="codeline" id="line-16"><code>	<label for="i8"><span class="lit-string i8">"runtime"</span></label></code></span>
-<span class="codeline" id="line-17"><code>	<label for="i9"><span class="lit-string i9">"slices"</span></label></code></span>
-<span class="codeline" id="line-18"><code>	<label for="i10"><span class="lit-string i10">"strings"</span></label></code></span>
-<span class="codeline" id="line-19"><code>	<label for="i11"><span class="lit-string i11">"time"</span></label></code></span>
-<span class="codeline" id="line-20"><code>	<label for="i12"><span class="lit-string i12">"unicode/utf8"</span></label></code></span>
-<span class="codeline" id="line-21"><code>)</code></span>
-<span class="codeline" id="line-22"><code></code></span>
-<span class="codeline" id="line-23"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-InvalidReason" class="ident">InvalidReason</a> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-10"><code>	<label for="i2"><span class="lit-string i2">"crypto/sha256"</span></label></code></span>
+<span class="codeline" id="line-11"><code>	<label for="i3"><span class="lit-string i3">"crypto/x509/pkix"</span></label></code></span>
+<span class="codeline" id="line-12"><code>	<label for="i4"><span class="lit-string i4">"encoding/hex"</span></label></code></span>
+<span class="codeline" id="line-13"><code>	<label for="i5"><span class="lit-string i5">"errors"</span></label></code></span>
+<span class="codeline" id="line-14"><code>	<label for="i6"><span class="lit-string i6">"fmt"</span></label></code></span>
+<span class="codeline" id="line-15"><code>	<label for="i7"><span class="lit-string i7">"iter"</span></label></code></span>
+<span class="codeline" id="line-16"><code>	<label for="i8"><span class="lit-string i8">"maps"</span></label></code></span>
+<span class="codeline" id="line-17"><code>	<label for="i9"><span class="lit-string i9">"net"</span></label></code></span>
+<span class="codeline" id="line-18"><code>	<label for="i10"><span class="lit-string i10">"runtime"</span></label></code></span>
+<span class="codeline" id="line-19"><code>	<label for="i11"><span class="lit-string i11">"slices"</span></label></code></span>
+<span class="codeline" id="line-20"><code>	<label for="i12"><span class="lit-string i12">"strings"</span></label></code></span>
+<span class="codeline" id="line-21"><code>	<label for="i13"><span class="lit-string i13">"time"</span></label></code></span>
+<span class="codeline" id="line-22"><code>	<label for="i14"><span class="lit-string i14">"unicode/utf8"</span></label></code></span>
+<span class="codeline" id="line-23"><code>)</code></span>
 <span class="codeline" id="line-24"><code></code></span>
-<span class="codeline" id="line-25"><code><span class="keyword">const</span> (</code></span>
-<span class="codeline" id="line-26"><code>	<span class="comment">// NotAuthorizedToSign results when a certificate is signed by another</span></code></span>
-<span class="codeline" id="line-27"><code><span class="comment">	// which isn't marked as a CA certificate.</span></code></span>
-<span class="codeline" id="line-28"><code>	<a href="../../../pkg/crypto/x509.html#name-NotAuthorizedToSign" class="ident">NotAuthorizedToSign</a> <a href="#line-23" class="ident">InvalidReason</a> = <a href="../../../pkg/builtin.html#name-iota" class="ident">iota</a></code></span>
-<span class="codeline" id="line-29"><code>	<span class="comment">// Expired results when a certificate has expired, based on the time</span></code></span>
-<span class="codeline" id="line-30"><code><span class="comment">	// given in the VerifyOptions.</span></code></span>
-<span class="codeline" id="line-31"><code>	<a href="../../../pkg/crypto/x509.html#name-Expired" class="ident">Expired</a></code></span>
-<span class="codeline" id="line-32"><code>	<span class="comment">// CANotAuthorizedForThisName results when an intermediate or root</span></code></span>
-<span class="codeline" id="line-33"><code><span class="comment">	// certificate has a name constraint which doesn't permit a DNS or</span></code></span>
-<span class="codeline" id="line-34"><code><span class="comment">	// other name (including IP address) in the leaf certificate.</span></code></span>
-<span class="codeline" id="line-35"><code>	<a href="../../../pkg/crypto/x509.html#name-CANotAuthorizedForThisName" class="ident">CANotAuthorizedForThisName</a></code></span>
-<span class="codeline" id="line-36"><code>	<span class="comment">// TooManyIntermediates results when a path length constraint is</span></code></span>
-<span class="codeline" id="line-37"><code><span class="comment">	// violated.</span></code></span>
-<span class="codeline" id="line-38"><code>	<a href="../../../pkg/crypto/x509.html#name-TooManyIntermediates" class="ident">TooManyIntermediates</a></code></span>
-<span class="codeline" id="line-39"><code>	<span class="comment">// IncompatibleUsage results when the certificate's key usage indicates</span></code></span>
-<span class="codeline" id="line-40"><code><span class="comment">	// that it may only be used for a different purpose.</span></code></span>
-<span class="codeline" id="line-41"><code>	<a href="../../../pkg/crypto/x509.html#name-IncompatibleUsage" class="ident">IncompatibleUsage</a></code></span>
-<span class="codeline" id="line-42"><code>	<span class="comment">// NameMismatch results when the subject name of a parent certificate</span></code></span>
-<span class="codeline" id="line-43"><code><span class="comment">	// does not match the issuer name in the child.</span></code></span>
-<span class="codeline" id="line-44"><code>	<a href="../../../pkg/crypto/x509.html#name-NameMismatch" class="ident">NameMismatch</a></code></span>
-<span class="codeline" id="line-45"><code>	<span class="comment">// NameConstraintsWithoutSANs is a legacy error and is no longer returned.</span></code></span>
-<span class="codeline" id="line-46"><code>	<a href="../../../pkg/crypto/x509.html#name-NameConstraintsWithoutSANs" class="ident">NameConstraintsWithoutSANs</a></code></span>
-<span class="codeline" id="line-47"><code>	<span class="comment">// UnconstrainedName results when a CA certificate contains permitted</span></code></span>
-<span class="codeline" id="line-48"><code><span class="comment">	// name constraints, but leaf certificate contains a name of an</span></code></span>
-<span class="codeline" id="line-49"><code><span class="comment">	// unsupported or unconstrained type.</span></code></span>
-<span class="codeline" id="line-50"><code>	<a href="../../../pkg/crypto/x509.html#name-UnconstrainedName" class="ident">UnconstrainedName</a></code></span>
-<span class="codeline" id="line-51"><code>	<span class="comment">// TooManyConstraints results when the number of comparison operations</span></code></span>
-<span class="codeline" id="line-52"><code><span class="comment">	// needed to check a certificate exceeds the limit set by</span></code></span>
-<span class="codeline" id="line-53"><code><span class="comment">	// VerifyOptions.MaxConstraintComparisions. This limit exists to</span></code></span>
-<span class="codeline" id="line-54"><code><span class="comment">	// prevent pathological certificates can consuming excessive amounts of</span></code></span>
-<span class="codeline" id="line-55"><code><span class="comment">	// CPU time to verify.</span></code></span>
-<span class="codeline" id="line-56"><code>	<a href="../../../pkg/crypto/x509.html#name-TooManyConstraints" class="ident">TooManyConstraints</a></code></span>
-<span class="codeline" id="line-57"><code>	<span class="comment">// CANotAuthorizedForExtKeyUsage results when an intermediate or root</span></code></span>
-<span class="codeline" id="line-58"><code><span class="comment">	// certificate does not permit a requested extended key usage.</span></code></span>
-<span class="codeline" id="line-59"><code>	<a href="../../../pkg/crypto/x509.html#name-CANotAuthorizedForExtKeyUsage" class="ident">CANotAuthorizedForExtKeyUsage</a></code></span>
-<span class="codeline" id="line-60"><code>	<span class="comment">// NoValidChains results when there are no valid chains to return.</span></code></span>
-<span class="codeline" id="line-61"><code>	<a href="../../../pkg/crypto/x509.html#name-NoValidChains" class="ident">NoValidChains</a></code></span>
-<span class="codeline" id="line-62"><code>)</code></span>
-<span class="codeline" id="line-63"><code></code></span>
-<span class="codeline" id="line-64"><code><span class="comment">// CertificateInvalidError results when an odd error occurs. Users of this</span></code></span>
-<span class="codeline" id="line-65"><code><span class="comment">// library probably want to handle all these errors uniformly.</span></code></span>
-<span class="codeline" id="line-66"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-CertificateInvalidError" class="ident">CertificateInvalidError</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-67"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Cert.html" class="ident">Cert</a>   *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-68"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Reason.html" class="ident">Reason</a> <a href="#line-23" class="ident">InvalidReason</a></code></span>
-<span class="codeline" id="line-69"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Detail.html" class="ident">Detail</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
-<span class="codeline" id="line-70"><code>}</code></span>
-<span class="codeline" id="line-71"><code></code></span>
-<span class="codeline" id="line-72"><code><span class="keyword">func</span> (<label for="r0" class="ident">e</label> <a href="#line-66" class="ident">CertificateInvalidError</a>) <label for="r1" class="ident"><a href="../../../use/crypto/x509..CertificateInvalidError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-73"><code>	<span class="keyword">switch</span> <label for="r0" class="ident">e</label>.<a href="#line-68" class="ident">Reason</a> {</code></span>
-<span class="codeline" id="line-74"><code>	<span class="keyword">case</span> <a href="#line-28" class="ident">NotAuthorizedToSign</a>:</code></span>
-<span class="codeline" id="line-75"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate is not authorized to sign other certificates"</span></code></span>
-<span class="codeline" id="line-76"><code>	<span class="keyword">case</span> <a href="#line-31" class="ident">Expired</a>:</code></span>
-<span class="codeline" id="line-77"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate has expired or is not yet valid: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a></code></span>
-<span class="codeline" id="line-78"><code>	<span class="keyword">case</span> <a href="#line-35" class="ident">CANotAuthorizedForThisName</a>:</code></span>
-<span class="codeline" id="line-79"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: a root or intermediate certificate is not authorized to sign for this name: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a></code></span>
-<span class="codeline" id="line-80"><code>	<span class="keyword">case</span> <a href="#line-59" class="ident">CANotAuthorizedForExtKeyUsage</a>:</code></span>
-<span class="codeline" id="line-81"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: a root or intermediate certificate is not authorized for an extended key usage: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a></code></span>
-<span class="codeline" id="line-82"><code>	<span class="keyword">case</span> <a href="#line-38" class="ident">TooManyIntermediates</a>:</code></span>
-<span class="codeline" id="line-83"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: too many intermediates for path length constraint"</span></code></span>
-<span class="codeline" id="line-84"><code>	<span class="keyword">case</span> <a href="#line-41" class="ident">IncompatibleUsage</a>:</code></span>
-<span class="codeline" id="line-85"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate specifies an incompatible key usage"</span></code></span>
-<span class="codeline" id="line-86"><code>	<span class="keyword">case</span> <a href="#line-44" class="ident">NameMismatch</a>:</code></span>
-<span class="codeline" id="line-87"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer name does not match subject from issuing certificate"</span></code></span>
-<span class="codeline" id="line-88"><code>	<span class="keyword">case</span> <a href="#line-46" class="ident">NameConstraintsWithoutSANs</a>:</code></span>
-<span class="codeline" id="line-89"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer has name constraints but leaf doesn't have a SAN extension"</span></code></span>
-<span class="codeline" id="line-90"><code>	<span class="keyword">case</span> <a href="#line-50" class="ident">UnconstrainedName</a>:</code></span>
-<span class="codeline" id="line-91"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer has name constraints but leaf contains unknown or unconstrained name: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a></code></span>
-<span class="codeline" id="line-92"><code>	<span class="keyword">case</span> <a href="#line-61" class="ident">NoValidChains</a>:</code></span>
-<span class="codeline" id="line-93"><code>		<label for="r2" class="ident">s</label> := <span class="lit-string">"x509: no valid chains built"</span></code></span>
-<span class="codeline" id="line-94"><code>		<span class="keyword">if</span> <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a> != <span class="lit-string">""</span> {</code></span>
-<span class="codeline" id="line-95"><code>			<label for="r2" class="ident">s</label> = <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s: %s"</span>, <label for="r2" class="ident">s</label>, <label for="r0" class="ident">e</label>.<a href="#line-69" class="ident">Detail</a>)</code></span>
-<span class="codeline" id="line-96"><code>		}</code></span>
-<span class="codeline" id="line-97"><code>		<span class="keyword">return</span> <label for="r2" class="ident">s</label></code></span>
-<span class="codeline" id="line-98"><code>	}</code></span>
-<span class="codeline" id="line-99"><code>	<span class="keyword">return</span> <span class="lit-string">"x509: unknown error"</span></code></span>
-<span class="codeline" id="line-100"><code>}</code></span>
-<span class="codeline" id="line-101"><code></code></span>
-<span class="codeline" id="line-102"><code><span class="comment">// HostnameError results when the set of authorized names doesn't match the</span></code></span>
-<span class="codeline" id="line-103"><code><span class="comment">// requested name.</span></code></span>
-<span class="codeline" id="line-104"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-HostnameError" class="ident">HostnameError</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-105"><code>	<a href="../../../use/crypto/x509..HostnameError.Certificate.html" class="ident">Certificate</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-106"><code>	<a href="../../../use/crypto/x509..HostnameError.Host.html" class="ident">Host</a>        <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
-<span class="codeline" id="line-107"><code>}</code></span>
-<span class="codeline" id="line-108"><code></code></span>
-<span class="codeline" id="line-109"><code><span class="keyword">func</span> (<label for="r3" class="ident">h</label> <a href="#line-104" class="ident">HostnameError</a>) <label for="r4" class="ident"><a href="../../../use/crypto/x509..HostnameError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-110"><code>	<label for="r5" class="ident">c</label> := <label for="r3" class="ident">h</label>.<a href="#line-105" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-111"><code>	<label for="r6" class="ident">maxNamesIncluded</label> := <span class="lit-number">100</span></code></span>
-<span class="codeline" id="line-112"><code></code></span>
-<span class="codeline" id="line-113"><code>	<span class="keyword">if</span> !<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-920" class="ident">hasSANExtension</a>() &amp;&amp; <a href="#line-870" class="ident">matchHostnames</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-127" class="ident">CommonName</a>, <a href="#line-977" class="ident">splitHostname</a>(<label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a>)) {</code></span>
-<span class="codeline" id="line-114"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate relies on legacy Common Name field, use SANs instead"</span></code></span>
-<span class="codeline" id="line-115"><code>	}</code></span>
-<span class="codeline" id="line-116"><code></code></span>
-<span class="codeline" id="line-117"><code>	<span class="keyword">var</span> <label for="r7" class="ident">valid</label> <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/builder.go.html#line-17" class="ident">Builder</a></code></span>
-<span class="codeline" id="line-118"><code>	<span class="keyword">if</span> <label for="r8" class="ident">ip</label> := <a href="../../../pkg/net.html" class="ident i7">net</a>.<a href="../../net/ip.go.html#line-527" class="ident">ParseIP</a>(<label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a>); <label for="r8" class="ident">ip</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-119"><code>		<span class="comment">// Trying to validate an IP</span></code></span>
-<span class="codeline" id="line-120"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-121"><code>			<span class="keyword">return</span> <span class="lit-string">"x509: cannot validate certificate for "</span> + <label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a> + <span class="lit-string">" because it doesn't contain any IP SANs"</span></code></span>
-<span class="codeline" id="line-122"><code>		}</code></span>
-<span class="codeline" id="line-123"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>) &gt;= <label for="r6" class="ident">maxNamesIncluded</label> {</code></span>
-<span class="codeline" id="line-124"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"x509: certificate is valid for %d IP SANs, but none matched %s"</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>), <label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a>)</code></span>
-<span class="codeline" id="line-125"><code>		}</code></span>
-<span class="codeline" id="line-126"><code>		<span class="keyword">for</span> <label for="r9" class="ident">_</label>, <label for="r10" class="ident">san</label> := <span class="keyword">range</span> <label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a> {</code></span>
-<span class="codeline" id="line-127"><code>			<span class="keyword">if</span> <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-51" class="ident">Len</a>() &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-128"><code>				<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<span class="lit-string">", "</span>)</code></span>
-<span class="codeline" id="line-129"><code>			}</code></span>
-<span class="codeline" id="line-130"><code>			<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<label for="r10" class="ident">san</label>.<a href="../../net/ip.go.html#line-296" class="ident">String</a>())</code></span>
-<span class="codeline" id="line-131"><code>		}</code></span>
-<span class="codeline" id="line-132"><code>	} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-133"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>) &gt;= <label for="r6" class="ident">maxNamesIncluded</label> {</code></span>
-<span class="codeline" id="line-134"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"x509: certificate is valid for %d names, but none matched %s"</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>), <label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a>)</code></span>
-<span class="codeline" id="line-135"><code>		}</code></span>
-<span class="codeline" id="line-136"><code>		<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-487" class="ident">Join</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>, <span class="lit-string">", "</span>))</code></span>
-<span class="codeline" id="line-137"><code>	}</code></span>
-<span class="codeline" id="line-138"><code></code></span>
-<span class="codeline" id="line-139"><code>	<span class="keyword">if</span> <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-51" class="ident">Len</a>() == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-140"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate is not valid for any names, but wanted to match "</span> + <label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a></code></span>
-<span class="codeline" id="line-141"><code>	}</code></span>
-<span class="codeline" id="line-142"><code>	<span class="keyword">return</span> <span class="lit-string">"x509: certificate is valid for "</span> + <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-46" class="ident">String</a>() + <span class="lit-string">", not "</span> + <label for="r3" class="ident">h</label>.<a href="#line-106" class="ident">Host</a></code></span>
-<span class="codeline" id="line-143"><code>}</code></span>
-<span class="codeline" id="line-144"><code></code></span>
-<span class="codeline" id="line-145"><code><span class="comment">// UnknownAuthorityError results when the certificate issuer is unknown</span></code></span>
-<span class="codeline" id="line-146"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-UnknownAuthorityError" class="ident">UnknownAuthorityError</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-147"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.Cert.html" class="ident">Cert</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-148"><code>	<span class="comment">// hintErr contains an error that may be helpful in determining why an</span></code></span>
-<span class="codeline" id="line-149"><code><span class="comment">	// authority wasn't found.</span></code></span>
-<span class="codeline" id="line-150"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html" class="ident">hintErr</a> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
-<span class="codeline" id="line-151"><code>	<span class="comment">// hintCert contains a possible authority certificate that was rejected</span></code></span>
-<span class="codeline" id="line-152"><code><span class="comment">	// because of the error in hintErr.</span></code></span>
-<span class="codeline" id="line-153"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html" class="ident">hintCert</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-154"><code>}</code></span>
-<span class="codeline" id="line-155"><code></code></span>
-<span class="codeline" id="line-156"><code><span class="keyword">func</span> (<label for="r11" class="ident">e</label> <a href="#line-146" class="ident">UnknownAuthorityError</a>) <label for="r12" class="ident"><a href="../../../use/crypto/x509..UnknownAuthorityError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-157"><code>	<label for="r13" class="ident">s</label> := <span class="lit-string">"x509: certificate signed by unknown authority"</span></code></span>
-<span class="codeline" id="line-158"><code>	<span class="keyword">if</span> <label for="r11" class="ident">e</label>.<a href="#line-150" class="ident">hintErr</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-159"><code>		<label for="r14" class="ident">certName</label> := <label for="r11" class="ident">e</label>.<a href="#line-153" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-127" class="ident">CommonName</a></code></span>
-<span class="codeline" id="line-160"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r14" class="ident">certName</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-161"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r11" class="ident">e</label>.<a href="#line-153" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-124" class="ident">Organization</a>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-162"><code>				<label for="r14" class="ident">certName</label> = <label for="r11" class="ident">e</label>.<a href="#line-153" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-124" class="ident">Organization</a>[<span class="lit-number">0</span>]</code></span>
-<span class="codeline" id="line-163"><code>			} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-164"><code>				<label for="r14" class="ident">certName</label> = <span class="lit-string">"serial:"</span> + <label for="r11" class="ident">e</label>.<a href="#line-153" class="ident">hintCert</a>.<a href="x509.go.html#line-718" class="ident">SerialNumber</a>.<a href="../../math/big/intconv.go.html#line-39" class="ident">String</a>()</code></span>
-<span class="codeline" id="line-165"><code>			}</code></span>
-<span class="codeline" id="line-166"><code>		}</code></span>
-<span class="codeline" id="line-167"><code>		<label for="r13" class="ident">s</label> += <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">" (possibly because of %q while trying to verify candidate authority certificate %q)"</span>, <label for="r11" class="ident">e</label>.<a href="#line-150" class="ident">hintErr</a>, <label for="r14" class="ident">certName</label>)</code></span>
-<span class="codeline" id="line-168"><code>	}</code></span>
-<span class="codeline" id="line-169"><code>	<span class="keyword">return</span> <label for="r13" class="ident">s</label></code></span>
-<span class="codeline" id="line-170"><code>}</code></span>
-<span class="codeline" id="line-171"><code></code></span>
-<span class="codeline" id="line-172"><code><span class="comment">// SystemRootsError results when we fail to load the system root certificates.</span></code></span>
-<span class="codeline" id="line-173"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-SystemRootsError" class="ident">SystemRootsError</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-174"><code>	<a href="../../../use/crypto/x509..SystemRootsError.Err.html" class="ident">Err</a> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
-<span class="codeline" id="line-175"><code>}</code></span>
-<span class="codeline" id="line-176"><code></code></span>
-<span class="codeline" id="line-177"><code><span class="keyword">func</span> (<label for="r15" class="ident">se</label> <a href="#line-173" class="ident">SystemRootsError</a>) <label for="r16" class="ident"><a href="../../../use/crypto/x509..SystemRootsError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-178"><code>	<label for="r17" class="ident">msg</label> := <span class="lit-string">"x509: failed to load system roots and no roots provided"</span></code></span>
-<span class="codeline" id="line-179"><code>	<span class="keyword">if</span> <label for="r15" class="ident">se</label>.<a href="#line-174" class="ident">Err</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-180"><code>		<span class="keyword">return</span> <label for="r17" class="ident">msg</label> + <span class="lit-string">"; "</span> + <label for="r15" class="ident">se</label>.<a href="#line-174" class="ident">Err</a>.Error()</code></span>
-<span class="codeline" id="line-181"><code>	}</code></span>
-<span class="codeline" id="line-182"><code>	<span class="keyword">return</span> <label for="r17" class="ident">msg</label></code></span>
-<span class="codeline" id="line-183"><code>}</code></span>
-<span class="codeline" id="line-184"><code></code></span>
-<span class="codeline" id="line-185"><code><span class="keyword">func</span> (<label for="r18" class="ident">se</label> <a href="#line-173" class="ident">SystemRootsError</a>) <label for="r19" class="ident"><a href="../../../use/crypto/x509..SystemRootsError.Unwrap.html" class="ident">Unwrap</a></label>() <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> { <span class="keyword">return</span> <label for="r18" class="ident">se</label>.<a href="#line-174" class="ident">Err</a> }</code></span>
+<span class="codeline" id="line-25"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-InvalidReason" class="ident">InvalidReason</a> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-26"><code></code></span>
+<span class="codeline" id="line-27"><code><span class="keyword">const</span> (</code></span>
+<span class="codeline" id="line-28"><code>	<span class="comment">// NotAuthorizedToSign results when a certificate is signed by another</span></code></span>
+<span class="codeline" id="line-29"><code><span class="comment">	// which isn't marked as a CA certificate.</span></code></span>
+<span class="codeline" id="line-30"><code>	<a href="../../../pkg/crypto/x509.html#name-NotAuthorizedToSign" class="ident">NotAuthorizedToSign</a> <a href="#line-25" class="ident">InvalidReason</a> = <a href="../../../pkg/builtin.html#name-iota" class="ident">iota</a></code></span>
+<span class="codeline" id="line-31"><code>	<span class="comment">// Expired results when a certificate has expired, based on the time</span></code></span>
+<span class="codeline" id="line-32"><code><span class="comment">	// given in the VerifyOptions.</span></code></span>
+<span class="codeline" id="line-33"><code>	<a href="../../../pkg/crypto/x509.html#name-Expired" class="ident">Expired</a></code></span>
+<span class="codeline" id="line-34"><code>	<span class="comment">// CANotAuthorizedForThisName results when an intermediate or root</span></code></span>
+<span class="codeline" id="line-35"><code><span class="comment">	// certificate has a name constraint which doesn't permit a DNS or</span></code></span>
+<span class="codeline" id="line-36"><code><span class="comment">	// other name (including IP address) in the leaf certificate.</span></code></span>
+<span class="codeline" id="line-37"><code>	<a href="../../../pkg/crypto/x509.html#name-CANotAuthorizedForThisName" class="ident">CANotAuthorizedForThisName</a></code></span>
+<span class="codeline" id="line-38"><code>	<span class="comment">// TooManyIntermediates results when a path length constraint is</span></code></span>
+<span class="codeline" id="line-39"><code><span class="comment">	// violated.</span></code></span>
+<span class="codeline" id="line-40"><code>	<a href="../../../pkg/crypto/x509.html#name-TooManyIntermediates" class="ident">TooManyIntermediates</a></code></span>
+<span class="codeline" id="line-41"><code>	<span class="comment">// IncompatibleUsage results when the certificate's key usage indicates</span></code></span>
+<span class="codeline" id="line-42"><code><span class="comment">	// that it may only be used for a different purpose.</span></code></span>
+<span class="codeline" id="line-43"><code>	<a href="../../../pkg/crypto/x509.html#name-IncompatibleUsage" class="ident">IncompatibleUsage</a></code></span>
+<span class="codeline" id="line-44"><code>	<span class="comment">// NameMismatch results when the subject name of a parent certificate</span></code></span>
+<span class="codeline" id="line-45"><code><span class="comment">	// does not match the issuer name in the child.</span></code></span>
+<span class="codeline" id="line-46"><code>	<a href="../../../pkg/crypto/x509.html#name-NameMismatch" class="ident">NameMismatch</a></code></span>
+<span class="codeline" id="line-47"><code>	<span class="comment">// NameConstraintsWithoutSANs is a legacy error and is no longer returned.</span></code></span>
+<span class="codeline" id="line-48"><code>	<a href="../../../pkg/crypto/x509.html#name-NameConstraintsWithoutSANs" class="ident">NameConstraintsWithoutSANs</a></code></span>
+<span class="codeline" id="line-49"><code>	<span class="comment">// UnconstrainedName results when a CA certificate contains permitted</span></code></span>
+<span class="codeline" id="line-50"><code><span class="comment">	// name constraints, but leaf certificate contains a name of an</span></code></span>
+<span class="codeline" id="line-51"><code><span class="comment">	// unsupported or unconstrained type.</span></code></span>
+<span class="codeline" id="line-52"><code>	<a href="../../../pkg/crypto/x509.html#name-UnconstrainedName" class="ident">UnconstrainedName</a></code></span>
+<span class="codeline" id="line-53"><code>	<span class="comment">// TooManyConstraints results when the number of comparison operations</span></code></span>
+<span class="codeline" id="line-54"><code><span class="comment">	// needed to check a certificate exceeds the limit set by</span></code></span>
+<span class="codeline" id="line-55"><code><span class="comment">	// VerifyOptions.MaxConstraintComparisions. This limit exists to</span></code></span>
+<span class="codeline" id="line-56"><code><span class="comment">	// prevent pathological certificates can consuming excessive amounts of</span></code></span>
+<span class="codeline" id="line-57"><code><span class="comment">	// CPU time to verify.</span></code></span>
+<span class="codeline" id="line-58"><code>	<a href="../../../pkg/crypto/x509.html#name-TooManyConstraints" class="ident">TooManyConstraints</a></code></span>
+<span class="codeline" id="line-59"><code>	<span class="comment">// CANotAuthorizedForExtKeyUsage results when an intermediate or root</span></code></span>
+<span class="codeline" id="line-60"><code><span class="comment">	// certificate does not permit a requested extended key usage.</span></code></span>
+<span class="codeline" id="line-61"><code>	<a href="../../../pkg/crypto/x509.html#name-CANotAuthorizedForExtKeyUsage" class="ident">CANotAuthorizedForExtKeyUsage</a></code></span>
+<span class="codeline" id="line-62"><code>	<span class="comment">// NoValidChains results when there are no valid chains to return.</span></code></span>
+<span class="codeline" id="line-63"><code>	<a href="../../../pkg/crypto/x509.html#name-NoValidChains" class="ident">NoValidChains</a></code></span>
+<span class="codeline" id="line-64"><code>)</code></span>
+<span class="codeline" id="line-65"><code></code></span>
+<span class="codeline" id="line-66"><code><span class="comment">// CertificateInvalidError results when an odd error occurs. Users of this</span></code></span>
+<span class="codeline" id="line-67"><code><span class="comment">// library probably want to handle all these errors uniformly.</span></code></span>
+<span class="codeline" id="line-68"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-CertificateInvalidError" class="ident">CertificateInvalidError</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-69"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Cert.html" class="ident">Cert</a>   *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-70"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Reason.html" class="ident">Reason</a> <a href="#line-25" class="ident">InvalidReason</a></code></span>
+<span class="codeline" id="line-71"><code>	<a href="../../../use/crypto/x509..CertificateInvalidError.Detail.html" class="ident">Detail</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
+<span class="codeline" id="line-72"><code>}</code></span>
+<span class="codeline" id="line-73"><code></code></span>
+<span class="codeline" id="line-74"><code><span class="keyword">func</span> (<label for="r0" class="ident">e</label> <a href="#line-68" class="ident">CertificateInvalidError</a>) <label for="r1" class="ident"><a href="../../../use/crypto/x509..CertificateInvalidError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-75"><code>	<span class="keyword">switch</span> <label for="r0" class="ident">e</label>.<a href="#line-70" class="ident">Reason</a> {</code></span>
+<span class="codeline" id="line-76"><code>	<span class="keyword">case</span> <a href="#line-30" class="ident">NotAuthorizedToSign</a>:</code></span>
+<span class="codeline" id="line-77"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate is not authorized to sign other certificates"</span></code></span>
+<span class="codeline" id="line-78"><code>	<span class="keyword">case</span> <a href="#line-33" class="ident">Expired</a>:</code></span>
+<span class="codeline" id="line-79"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate has expired or is not yet valid: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a></code></span>
+<span class="codeline" id="line-80"><code>	<span class="keyword">case</span> <a href="#line-37" class="ident">CANotAuthorizedForThisName</a>:</code></span>
+<span class="codeline" id="line-81"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: a root or intermediate certificate is not authorized to sign for this name: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a></code></span>
+<span class="codeline" id="line-82"><code>	<span class="keyword">case</span> <a href="#line-61" class="ident">CANotAuthorizedForExtKeyUsage</a>:</code></span>
+<span class="codeline" id="line-83"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: a root or intermediate certificate is not authorized for an extended key usage: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a></code></span>
+<span class="codeline" id="line-84"><code>	<span class="keyword">case</span> <a href="#line-40" class="ident">TooManyIntermediates</a>:</code></span>
+<span class="codeline" id="line-85"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: too many intermediates for path length constraint"</span></code></span>
+<span class="codeline" id="line-86"><code>	<span class="keyword">case</span> <a href="#line-43" class="ident">IncompatibleUsage</a>:</code></span>
+<span class="codeline" id="line-87"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate specifies an incompatible key usage"</span></code></span>
+<span class="codeline" id="line-88"><code>	<span class="keyword">case</span> <a href="#line-46" class="ident">NameMismatch</a>:</code></span>
+<span class="codeline" id="line-89"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer name does not match subject from issuing certificate"</span></code></span>
+<span class="codeline" id="line-90"><code>	<span class="keyword">case</span> <a href="#line-48" class="ident">NameConstraintsWithoutSANs</a>:</code></span>
+<span class="codeline" id="line-91"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer has name constraints but leaf doesn't have a SAN extension"</span></code></span>
+<span class="codeline" id="line-92"><code>	<span class="keyword">case</span> <a href="#line-52" class="ident">UnconstrainedName</a>:</code></span>
+<span class="codeline" id="line-93"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: issuer has name constraints but leaf contains unknown or unconstrained name: "</span> + <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a></code></span>
+<span class="codeline" id="line-94"><code>	<span class="keyword">case</span> <a href="#line-63" class="ident">NoValidChains</a>:</code></span>
+<span class="codeline" id="line-95"><code>		<label for="r2" class="ident">s</label> := <span class="lit-string">"x509: no valid chains built"</span></code></span>
+<span class="codeline" id="line-96"><code>		<span class="keyword">if</span> <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a> != <span class="lit-string">""</span> {</code></span>
+<span class="codeline" id="line-97"><code>			<label for="r2" class="ident">s</label> = <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s: %s"</span>, <label for="r2" class="ident">s</label>, <label for="r0" class="ident">e</label>.<a href="#line-71" class="ident">Detail</a>)</code></span>
+<span class="codeline" id="line-98"><code>		}</code></span>
+<span class="codeline" id="line-99"><code>		<span class="keyword">return</span> <label for="r2" class="ident">s</label></code></span>
+<span class="codeline" id="line-100"><code>	}</code></span>
+<span class="codeline" id="line-101"><code>	<span class="keyword">return</span> <span class="lit-string">"x509: unknown error"</span></code></span>
+<span class="codeline" id="line-102"><code>}</code></span>
+<span class="codeline" id="line-103"><code></code></span>
+<span class="codeline" id="line-104"><code><span class="comment">// HostnameError results when the set of authorized names doesn't match the</span></code></span>
+<span class="codeline" id="line-105"><code><span class="comment">// requested name.</span></code></span>
+<span class="codeline" id="line-106"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-HostnameError" class="ident">HostnameError</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-107"><code>	<a href="../../../use/crypto/x509..HostnameError.Certificate.html" class="ident">Certificate</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-108"><code>	<a href="../../../use/crypto/x509..HostnameError.Host.html" class="ident">Host</a>        <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
+<span class="codeline" id="line-109"><code>}</code></span>
+<span class="codeline" id="line-110"><code></code></span>
+<span class="codeline" id="line-111"><code><span class="keyword">func</span> (<label for="r3" class="ident">h</label> <a href="#line-106" class="ident">HostnameError</a>) <label for="r4" class="ident"><a href="../../../use/crypto/x509..HostnameError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-112"><code>	<label for="r5" class="ident">c</label> := <label for="r3" class="ident">h</label>.<a href="#line-107" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-113"><code>	<label for="r6" class="ident">maxNamesIncluded</label> := <span class="lit-number">100</span></code></span>
+<span class="codeline" id="line-114"><code></code></span>
+<span class="codeline" id="line-115"><code>	<span class="keyword">if</span> !<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-920" class="ident">hasSANExtension</a>() &amp;&amp; <a href="#line-875" class="ident">matchHostnames</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-127" class="ident">CommonName</a>, <a href="#line-982" class="ident">splitHostname</a>(<label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a>)) {</code></span>
+<span class="codeline" id="line-116"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate relies on legacy Common Name field, use SANs instead"</span></code></span>
+<span class="codeline" id="line-117"><code>	}</code></span>
+<span class="codeline" id="line-118"><code></code></span>
+<span class="codeline" id="line-119"><code>	<span class="keyword">var</span> <label for="r7" class="ident">valid</label> <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/builder.go.html#line-17" class="ident">Builder</a></code></span>
+<span class="codeline" id="line-120"><code>	<span class="keyword">if</span> <label for="r8" class="ident">ip</label> := <a href="../../../pkg/net.html" class="ident i9">net</a>.<a href="../../net/ip.go.html#line-527" class="ident">ParseIP</a>(<label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a>); <label for="r8" class="ident">ip</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-121"><code>		<span class="comment">// Trying to validate an IP</span></code></span>
+<span class="codeline" id="line-122"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-123"><code>			<span class="keyword">return</span> <span class="lit-string">"x509: cannot validate certificate for "</span> + <label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a> + <span class="lit-string">" because it doesn't contain any IP SANs"</span></code></span>
+<span class="codeline" id="line-124"><code>		}</code></span>
+<span class="codeline" id="line-125"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>) &gt;= <label for="r6" class="ident">maxNamesIncluded</label> {</code></span>
+<span class="codeline" id="line-126"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"x509: certificate is valid for %d IP SANs, but none matched %s"</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a>), <label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a>)</code></span>
+<span class="codeline" id="line-127"><code>		}</code></span>
+<span class="codeline" id="line-128"><code>		<span class="keyword">for</span> <label for="r9" class="ident">_</label>, <label for="r10" class="ident">san</label> := <span class="keyword">range</span> <label for="r5" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a> {</code></span>
+<span class="codeline" id="line-129"><code>			<span class="keyword">if</span> <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-51" class="ident">Len</a>() &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-130"><code>				<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<span class="lit-string">", "</span>)</code></span>
+<span class="codeline" id="line-131"><code>			}</code></span>
+<span class="codeline" id="line-132"><code>			<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<label for="r10" class="ident">san</label>.<a href="../../net/ip.go.html#line-296" class="ident">String</a>())</code></span>
+<span class="codeline" id="line-133"><code>		}</code></span>
+<span class="codeline" id="line-134"><code>	} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-135"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>) &gt;= <label for="r6" class="ident">maxNamesIncluded</label> {</code></span>
+<span class="codeline" id="line-136"><code>			<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"x509: certificate is valid for %d names, but none matched %s"</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>), <label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a>)</code></span>
+<span class="codeline" id="line-137"><code>		}</code></span>
+<span class="codeline" id="line-138"><code>		<label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-112" class="ident">WriteString</a>(<a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-487" class="ident">Join</a>(<label for="r5" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a>, <span class="lit-string">", "</span>))</code></span>
+<span class="codeline" id="line-139"><code>	}</code></span>
+<span class="codeline" id="line-140"><code></code></span>
+<span class="codeline" id="line-141"><code>	<span class="keyword">if</span> <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-51" class="ident">Len</a>() == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-142"><code>		<span class="keyword">return</span> <span class="lit-string">"x509: certificate is not valid for any names, but wanted to match "</span> + <label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a></code></span>
+<span class="codeline" id="line-143"><code>	}</code></span>
+<span class="codeline" id="line-144"><code>	<span class="keyword">return</span> <span class="lit-string">"x509: certificate is valid for "</span> + <label for="r7" class="ident">valid</label>.<a href="../../strings/builder.go.html#line-46" class="ident">String</a>() + <span class="lit-string">", not "</span> + <label for="r3" class="ident">h</label>.<a href="#line-108" class="ident">Host</a></code></span>
+<span class="codeline" id="line-145"><code>}</code></span>
+<span class="codeline" id="line-146"><code></code></span>
+<span class="codeline" id="line-147"><code><span class="comment">// UnknownAuthorityError results when the certificate issuer is unknown</span></code></span>
+<span class="codeline" id="line-148"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-UnknownAuthorityError" class="ident">UnknownAuthorityError</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-149"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.Cert.html" class="ident">Cert</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-150"><code>	<span class="comment">// hintErr contains an error that may be helpful in determining why an</span></code></span>
+<span class="codeline" id="line-151"><code><span class="comment">	// authority wasn't found.</span></code></span>
+<span class="codeline" id="line-152"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html" class="ident">hintErr</a> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
+<span class="codeline" id="line-153"><code>	<span class="comment">// hintCert contains a possible authority certificate that was rejected</span></code></span>
+<span class="codeline" id="line-154"><code><span class="comment">	// because of the error in hintErr.</span></code></span>
+<span class="codeline" id="line-155"><code>	<a href="../../../use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html" class="ident">hintCert</a> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-156"><code>}</code></span>
+<span class="codeline" id="line-157"><code></code></span>
+<span class="codeline" id="line-158"><code><span class="keyword">func</span> (<label for="r11" class="ident">e</label> <a href="#line-148" class="ident">UnknownAuthorityError</a>) <label for="r12" class="ident"><a href="../../../use/crypto/x509..UnknownAuthorityError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-159"><code>	<label for="r13" class="ident">s</label> := <span class="lit-string">"x509: certificate signed by unknown authority"</span></code></span>
+<span class="codeline" id="line-160"><code>	<span class="keyword">if</span> <label for="r11" class="ident">e</label>.<a href="#line-152" class="ident">hintErr</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-161"><code>		<label for="r14" class="ident">certName</label> := <label for="r11" class="ident">e</label>.<a href="#line-155" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-127" class="ident">CommonName</a></code></span>
+<span class="codeline" id="line-162"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r14" class="ident">certName</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-163"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r11" class="ident">e</label>.<a href="#line-155" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-124" class="ident">Organization</a>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-164"><code>				<label for="r14" class="ident">certName</label> = <label for="r11" class="ident">e</label>.<a href="#line-155" class="ident">hintCert</a>.<a href="x509.go.html#line-720" class="ident">Subject</a>.<a href="pkix/pkix.go.html#line-124" class="ident">Organization</a>[<span class="lit-number">0</span>]</code></span>
+<span class="codeline" id="line-165"><code>			} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-166"><code>				<label for="r14" class="ident">certName</label> = <span class="lit-string">"serial:"</span> + <label for="r11" class="ident">e</label>.<a href="#line-155" class="ident">hintCert</a>.<a href="x509.go.html#line-718" class="ident">SerialNumber</a>.<a href="../../math/big/intconv.go.html#line-39" class="ident">String</a>()</code></span>
+<span class="codeline" id="line-167"><code>			}</code></span>
+<span class="codeline" id="line-168"><code>		}</code></span>
+<span class="codeline" id="line-169"><code>		<label for="r13" class="ident">s</label> += <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">" (possibly because of %q while trying to verify candidate authority certificate %q)"</span>, <label for="r11" class="ident">e</label>.<a href="#line-152" class="ident">hintErr</a>, <label for="r14" class="ident">certName</label>)</code></span>
+<span class="codeline" id="line-170"><code>	}</code></span>
+<span class="codeline" id="line-171"><code>	<span class="keyword">return</span> <label for="r13" class="ident">s</label></code></span>
+<span class="codeline" id="line-172"><code>}</code></span>
+<span class="codeline" id="line-173"><code></code></span>
+<span class="codeline" id="line-174"><code><span class="comment">// SystemRootsError results when we fail to load the system root certificates.</span></code></span>
+<span class="codeline" id="line-175"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-SystemRootsError" class="ident">SystemRootsError</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-176"><code>	<a href="../../../use/crypto/x509..SystemRootsError.Err.html" class="ident">Err</a> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
+<span class="codeline" id="line-177"><code>}</code></span>
+<span class="codeline" id="line-178"><code></code></span>
+<span class="codeline" id="line-179"><code><span class="keyword">func</span> (<label for="r15" class="ident">se</label> <a href="#line-175" class="ident">SystemRootsError</a>) <label for="r16" class="ident"><a href="../../../use/crypto/x509..SystemRootsError.Error.html" class="ident">Error</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-180"><code>	<label for="r17" class="ident">msg</label> := <span class="lit-string">"x509: failed to load system roots and no roots provided"</span></code></span>
+<span class="codeline" id="line-181"><code>	<span class="keyword">if</span> <label for="r15" class="ident">se</label>.<a href="#line-176" class="ident">Err</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-182"><code>		<span class="keyword">return</span> <label for="r17" class="ident">msg</label> + <span class="lit-string">"; "</span> + <label for="r15" class="ident">se</label>.<a href="#line-176" class="ident">Err</a>.Error()</code></span>
+<span class="codeline" id="line-183"><code>	}</code></span>
+<span class="codeline" id="line-184"><code>	<span class="keyword">return</span> <label for="r17" class="ident">msg</label></code></span>
+<span class="codeline" id="line-185"><code>}</code></span>
 <span class="codeline" id="line-186"><code></code></span>
-<span class="codeline" id="line-187"><code><span class="comment">// errNotParsed is returned when a certificate without ASN.1 contents is</span></code></span>
-<span class="codeline" id="line-188"><code><span class="comment">// verified. Platform-specific verification needs the ASN.1 contents.</span></code></span>
-<span class="codeline" id="line-189"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-errNotParsed" class="ident">errNotParsed</a> = <a href="../../../pkg/errors.html" class="ident i3">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: missing ASN.1 contents; use ParseCertificate"</span>)</code></span>
-<span class="codeline" id="line-190"><code></code></span>
-<span class="codeline" id="line-191"><code><span class="comment">// VerifyOptions contains parameters for Certificate.Verify.</span></code></span>
-<span class="codeline" id="line-192"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-VerifyOptions" class="ident">VerifyOptions</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-193"><code>	<span class="comment">// DNSName, if set, is checked against the leaf certificate with</span></code></span>
-<span class="codeline" id="line-194"><code><span class="comment">	// Certificate.VerifyHostname or the platform verifier.</span></code></span>
-<span class="codeline" id="line-195"><code>	<a href="../../../use/crypto/x509..VerifyOptions.DNSName.html" class="ident">DNSName</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
-<span class="codeline" id="line-196"><code></code></span>
-<span class="codeline" id="line-197"><code>	<span class="comment">// Intermediates is an optional pool of certificates that are not trust</span></code></span>
-<span class="codeline" id="line-198"><code><span class="comment">	// anchors, but can be used to form a chain from the leaf certificate to a</span></code></span>
-<span class="codeline" id="line-199"><code><span class="comment">	// root certificate.</span></code></span>
-<span class="codeline" id="line-200"><code>	<a href="../../../use/crypto/x509..VerifyOptions.Intermediates.html" class="ident">Intermediates</a> *<a href="cert_pool.go.html#line-17" class="ident">CertPool</a></code></span>
-<span class="codeline" id="line-201"><code>	<span class="comment">// Roots is the set of trusted root certificates the leaf certificate needs</span></code></span>
-<span class="codeline" id="line-202"><code><span class="comment">	// to chain up to. If nil, the system roots or the platform verifier are used.</span></code></span>
-<span class="codeline" id="line-203"><code>	<a href="../../../use/crypto/x509..VerifyOptions.Roots.html" class="ident">Roots</a> *<a href="cert_pool.go.html#line-17" class="ident">CertPool</a></code></span>
-<span class="codeline" id="line-204"><code></code></span>
-<span class="codeline" id="line-205"><code>	<span class="comment">// CurrentTime is used to check the validity of all certificates in the</span></code></span>
-<span class="codeline" id="line-206"><code><span class="comment">	// chain. If zero, the current time is used.</span></code></span>
-<span class="codeline" id="line-207"><code>	<a href="../../../use/crypto/x509..VerifyOptions.CurrentTime.html" class="ident">CurrentTime</a> <a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/time.go.html#line-140" class="ident">Time</a></code></span>
-<span class="codeline" id="line-208"><code></code></span>
-<span class="codeline" id="line-209"><code>	<span class="comment">// KeyUsages specifies which Extended Key Usage values are acceptable. A</span></code></span>
-<span class="codeline" id="line-210"><code><span class="comment">	// chain is accepted if it allows any of the listed values. An empty list</span></code></span>
-<span class="codeline" id="line-211"><code><span class="comment">	// means ExtKeyUsageServerAuth. To accept any key usage, include ExtKeyUsageAny.</span></code></span>
-<span class="codeline" id="line-212"><code>	<a href="../../../use/crypto/x509..VerifyOptions.KeyUsages.html" class="ident">KeyUsages</a> []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a></code></span>
-<span class="codeline" id="line-213"><code></code></span>
-<span class="codeline" id="line-214"><code>	<span class="comment">// MaxConstraintComparisions is the maximum number of comparisons to</span></code></span>
-<span class="codeline" id="line-215"><code><span class="comment">	// perform when checking a given certificate's name constraints. If</span></code></span>
-<span class="codeline" id="line-216"><code><span class="comment">	// zero, a sensible default is used. This limit prevents pathological</span></code></span>
-<span class="codeline" id="line-217"><code><span class="comment">	// certificates from consuming excessive amounts of CPU time when</span></code></span>
-<span class="codeline" id="line-218"><code><span class="comment">	// validating. It does not apply to the platform verifier.</span></code></span>
-<span class="codeline" id="line-219"><code>	<a href="../../../use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html" class="ident">MaxConstraintComparisions</a> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-220"><code></code></span>
-<span class="codeline" id="line-221"><code>	<span class="comment">// CertificatePolicies specifies which certificate policy OIDs are</span></code></span>
-<span class="codeline" id="line-222"><code><span class="comment">	// acceptable during policy validation. An empty CertificatePolices</span></code></span>
-<span class="codeline" id="line-223"><code><span class="comment">	// field implies any valid policy is acceptable.</span></code></span>
-<span class="codeline" id="line-224"><code>	<a href="../../../use/crypto/x509..VerifyOptions.CertificatePolicies.html" class="ident">CertificatePolicies</a> []<a href="oid.go.html#line-23" class="ident">OID</a></code></span>
-<span class="codeline" id="line-225"><code></code></span>
-<span class="codeline" id="line-226"><code>	<span class="comment">// The following policy fields are unexported, because we do not expect</span></code></span>
-<span class="codeline" id="line-227"><code><span class="comment">	// users to actually need to use them, but are useful for testing the</span></code></span>
-<span class="codeline" id="line-228"><code><span class="comment">	// policy validation code.</span></code></span>
-<span class="codeline" id="line-229"><code></code></span>
-<span class="codeline" id="line-230"><code>	<span class="comment">// inhibitPolicyMapping indicates if policy mapping should be allowed</span></code></span>
-<span class="codeline" id="line-231"><code><span class="comment">	// during path validation.</span></code></span>
-<span class="codeline" id="line-232"><code>	<a href="../../../use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html" class="ident">inhibitPolicyMapping</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-233"><code></code></span>
-<span class="codeline" id="line-234"><code>	<span class="comment">// requireExplicitPolicy indidicates if explicit policies must be present</span></code></span>
-<span class="codeline" id="line-235"><code><span class="comment">	// for each certificate being validated.</span></code></span>
-<span class="codeline" id="line-236"><code>	<a href="../../../use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html" class="ident">requireExplicitPolicy</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-237"><code></code></span>
-<span class="codeline" id="line-238"><code>	<span class="comment">// inhibitAnyPolicy indicates if the anyPolicy policy should be</span></code></span>
-<span class="codeline" id="line-239"><code><span class="comment">	// processed if present in a certificate being validated.</span></code></span>
-<span class="codeline" id="line-240"><code>	<a href="../../../use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html" class="ident">inhibitAnyPolicy</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-241"><code>}</code></span>
-<span class="codeline" id="line-242"><code></code></span>
-<span class="codeline" id="line-243"><code><span class="keyword">const</span> (</code></span>
-<span class="codeline" id="line-244"><code>	<a href="../../../pkg/crypto/x509.html#name-leafCertificate" class="ident">leafCertificate</a> = <a href="../../../pkg/builtin.html#name-iota" class="ident">iota</a></code></span>
-<span class="codeline" id="line-245"><code>	<a href="../../../pkg/crypto/x509.html#name-intermediateCertificate" class="ident">intermediateCertificate</a></code></span>
-<span class="codeline" id="line-246"><code>	<a href="../../../pkg/crypto/x509.html#name-rootCertificate" class="ident">rootCertificate</a></code></span>
-<span class="codeline" id="line-247"><code>)</code></span>
-<span class="codeline" id="line-248"><code></code></span>
-<span class="codeline" id="line-249"><code><span class="comment">// rfc2821Mailbox represents a “mailbox” (which is an email address to most</span></code></span>
-<span class="codeline" id="line-250"><code><span class="comment">// people) by breaking it into the “local” (i.e. before the '@') and “domain”</span></code></span>
-<span class="codeline" id="line-251"><code><span class="comment">// parts.</span></code></span>
-<span class="codeline" id="line-252"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-rfc2821Mailbox" class="ident">rfc2821Mailbox</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-253"><code>	<a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html" class="ident">local</a>, <a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html" class="ident">domain</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
-<span class="codeline" id="line-254"><code>}</code></span>
-<span class="codeline" id="line-255"><code></code></span>
-<span class="codeline" id="line-256"><code><span class="keyword">func</span> (<label for="r20" class="ident">s</label> <a href="#line-252" class="ident">rfc2821Mailbox</a>) <label for="r21" class="ident"><a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.String.html" class="ident">String</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-257"><code>	<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s@%s"</span>, <label for="r20" class="ident">s</label>.<a href="#line-253" class="ident">local</a>, <label for="r20" class="ident">s</label>.<a href="#line-253" class="ident">domain</a>)</code></span>
-<span class="codeline" id="line-258"><code>}</code></span>
-<span class="codeline" id="line-259"><code></code></span>
-<span class="codeline" id="line-260"><code><span class="comment">// parseRFC2821Mailbox parses an email address into local and domain parts,</span></code></span>
-<span class="codeline" id="line-261"><code><span class="comment">// based on the ABNF for a “Mailbox” from RFC 2821. According to RFC 5280,</span></code></span>
-<span class="codeline" id="line-262"><code><span class="comment">// Section 4.2.1.6 that's correct for an rfc822Name from a certificate: “The</span></code></span>
-<span class="codeline" id="line-263"><code><span class="comment">// format of an rfc822Name is a "Mailbox" as defined in RFC 2821, Section 4.1.2”.</span></code></span>
-<span class="codeline" id="line-264"><code><span class="keyword">func</span> <label for="r22" class="ident"><a href="../../../pkg/crypto/x509.html#name-parseRFC2821Mailbox" class="ident">parseRFC2821Mailbox</a></label>(<label for="r23" class="ident">in</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) (<label for="r24" class="ident">mailbox</label> <a href="#line-252" class="ident">rfc2821Mailbox</a>, <label for="r25" class="ident">ok</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
-<span class="codeline" id="line-265"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-266"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-267"><code>	}</code></span>
-<span class="codeline" id="line-268"><code></code></span>
-<span class="codeline" id="line-269"><code>	<label for="r26" class="ident">localPartBytes</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>, <span class="lit-number">0</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>)/<span class="lit-number">2</span>)</code></span>
+<span class="codeline" id="line-187"><code><span class="keyword">func</span> (<label for="r18" class="ident">se</label> <a href="#line-175" class="ident">SystemRootsError</a>) <label for="r19" class="ident"><a href="../../../use/crypto/x509..SystemRootsError.Unwrap.html" class="ident">Unwrap</a></label>() <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> { <span class="keyword">return</span> <label for="r18" class="ident">se</label>.<a href="#line-176" class="ident">Err</a> }</code></span>
+<span class="codeline" id="line-188"><code></code></span>
+<span class="codeline" id="line-189"><code><span class="comment">// errNotParsed is returned when a certificate without ASN.1 contents is</span></code></span>
+<span class="codeline" id="line-190"><code><span class="comment">// verified. Platform-specific verification needs the ASN.1 contents.</span></code></span>
+<span class="codeline" id="line-191"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-errNotParsed" class="ident">errNotParsed</a> = <a href="../../../pkg/errors.html" class="ident i5">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: missing ASN.1 contents; use ParseCertificate"</span>)</code></span>
+<span class="codeline" id="line-192"><code></code></span>
+<span class="codeline" id="line-193"><code><span class="comment">// VerifyOptions contains parameters for Certificate.Verify.</span></code></span>
+<span class="codeline" id="line-194"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-VerifyOptions" class="ident">VerifyOptions</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-195"><code>	<span class="comment">// DNSName, if set, is checked against the leaf certificate with</span></code></span>
+<span class="codeline" id="line-196"><code><span class="comment">	// Certificate.VerifyHostname or the platform verifier.</span></code></span>
+<span class="codeline" id="line-197"><code>	<a href="../../../use/crypto/x509..VerifyOptions.DNSName.html" class="ident">DNSName</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
+<span class="codeline" id="line-198"><code></code></span>
+<span class="codeline" id="line-199"><code>	<span class="comment">// Intermediates is an optional pool of certificates that are not trust</span></code></span>
+<span class="codeline" id="line-200"><code><span class="comment">	// anchors, but can be used to form a chain from the leaf certificate to a</span></code></span>
+<span class="codeline" id="line-201"><code><span class="comment">	// root certificate.</span></code></span>
+<span class="codeline" id="line-202"><code>	<a href="../../../use/crypto/x509..VerifyOptions.Intermediates.html" class="ident">Intermediates</a> *<a href="cert_pool.go.html#line-17" class="ident">CertPool</a></code></span>
+<span class="codeline" id="line-203"><code>	<span class="comment">// Roots is the set of trusted root certificates the leaf certificate needs</span></code></span>
+<span class="codeline" id="line-204"><code><span class="comment">	// to chain up to. If nil, the system roots or the platform verifier are used.</span></code></span>
+<span class="codeline" id="line-205"><code>	<a href="../../../use/crypto/x509..VerifyOptions.Roots.html" class="ident">Roots</a> *<a href="cert_pool.go.html#line-17" class="ident">CertPool</a></code></span>
+<span class="codeline" id="line-206"><code></code></span>
+<span class="codeline" id="line-207"><code>	<span class="comment">// CurrentTime is used to check the validity of all certificates in the</span></code></span>
+<span class="codeline" id="line-208"><code><span class="comment">	// chain. If zero, the current time is used.</span></code></span>
+<span class="codeline" id="line-209"><code>	<a href="../../../use/crypto/x509..VerifyOptions.CurrentTime.html" class="ident">CurrentTime</a> <a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/time.go.html#line-140" class="ident">Time</a></code></span>
+<span class="codeline" id="line-210"><code></code></span>
+<span class="codeline" id="line-211"><code>	<span class="comment">// KeyUsages specifies which Extended Key Usage values are acceptable. A</span></code></span>
+<span class="codeline" id="line-212"><code><span class="comment">	// chain is accepted if it allows any of the listed values. An empty list</span></code></span>
+<span class="codeline" id="line-213"><code><span class="comment">	// means ExtKeyUsageServerAuth. To accept any key usage, include ExtKeyUsageAny.</span></code></span>
+<span class="codeline" id="line-214"><code>	<a href="../../../use/crypto/x509..VerifyOptions.KeyUsages.html" class="ident">KeyUsages</a> []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a></code></span>
+<span class="codeline" id="line-215"><code></code></span>
+<span class="codeline" id="line-216"><code>	<span class="comment">// MaxConstraintComparisions is the maximum number of comparisons to</span></code></span>
+<span class="codeline" id="line-217"><code><span class="comment">	// perform when checking a given certificate's name constraints. If</span></code></span>
+<span class="codeline" id="line-218"><code><span class="comment">	// zero, a sensible default is used. This limit prevents pathological</span></code></span>
+<span class="codeline" id="line-219"><code><span class="comment">	// certificates from consuming excessive amounts of CPU time when</span></code></span>
+<span class="codeline" id="line-220"><code><span class="comment">	// validating. It does not apply to the platform verifier.</span></code></span>
+<span class="codeline" id="line-221"><code>	<a href="../../../use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html" class="ident">MaxConstraintComparisions</a> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-222"><code></code></span>
+<span class="codeline" id="line-223"><code>	<span class="comment">// CertificatePolicies specifies which certificate policy OIDs are</span></code></span>
+<span class="codeline" id="line-224"><code><span class="comment">	// acceptable during policy validation. An empty CertificatePolices</span></code></span>
+<span class="codeline" id="line-225"><code><span class="comment">	// field implies any valid policy is acceptable.</span></code></span>
+<span class="codeline" id="line-226"><code>	<a href="../../../use/crypto/x509..VerifyOptions.CertificatePolicies.html" class="ident">CertificatePolicies</a> []<a href="oid.go.html#line-23" class="ident">OID</a></code></span>
+<span class="codeline" id="line-227"><code></code></span>
+<span class="codeline" id="line-228"><code>	<span class="comment">// The following policy fields are unexported, because we do not expect</span></code></span>
+<span class="codeline" id="line-229"><code><span class="comment">	// users to actually need to use them, but are useful for testing the</span></code></span>
+<span class="codeline" id="line-230"><code><span class="comment">	// policy validation code.</span></code></span>
+<span class="codeline" id="line-231"><code></code></span>
+<span class="codeline" id="line-232"><code>	<span class="comment">// inhibitPolicyMapping indicates if policy mapping should be allowed</span></code></span>
+<span class="codeline" id="line-233"><code><span class="comment">	// during path validation.</span></code></span>
+<span class="codeline" id="line-234"><code>	<a href="../../../use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html" class="ident">inhibitPolicyMapping</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-235"><code></code></span>
+<span class="codeline" id="line-236"><code>	<span class="comment">// requireExplicitPolicy indidicates if explicit policies must be present</span></code></span>
+<span class="codeline" id="line-237"><code><span class="comment">	// for each certificate being validated.</span></code></span>
+<span class="codeline" id="line-238"><code>	<a href="../../../use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html" class="ident">requireExplicitPolicy</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-239"><code></code></span>
+<span class="codeline" id="line-240"><code>	<span class="comment">// inhibitAnyPolicy indicates if the anyPolicy policy should be</span></code></span>
+<span class="codeline" id="line-241"><code><span class="comment">	// processed if present in a certificate being validated.</span></code></span>
+<span class="codeline" id="line-242"><code>	<a href="../../../use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html" class="ident">inhibitAnyPolicy</a> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-243"><code>}</code></span>
+<span class="codeline" id="line-244"><code></code></span>
+<span class="codeline" id="line-245"><code><span class="keyword">const</span> (</code></span>
+<span class="codeline" id="line-246"><code>	<a href="../../../pkg/crypto/x509.html#name-leafCertificate" class="ident">leafCertificate</a> = <a href="../../../pkg/builtin.html#name-iota" class="ident">iota</a></code></span>
+<span class="codeline" id="line-247"><code>	<a href="../../../pkg/crypto/x509.html#name-intermediateCertificate" class="ident">intermediateCertificate</a></code></span>
+<span class="codeline" id="line-248"><code>	<a href="../../../pkg/crypto/x509.html#name-rootCertificate" class="ident">rootCertificate</a></code></span>
+<span class="codeline" id="line-249"><code>)</code></span>
+<span class="codeline" id="line-250"><code></code></span>
+<span class="codeline" id="line-251"><code><span class="comment">// rfc2821Mailbox represents a “mailbox” (which is an email address to most</span></code></span>
+<span class="codeline" id="line-252"><code><span class="comment">// people) by breaking it into the “local” (i.e. before the '@') and “domain”</span></code></span>
+<span class="codeline" id="line-253"><code><span class="comment">// parts.</span></code></span>
+<span class="codeline" id="line-254"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-rfc2821Mailbox" class="ident">rfc2821Mailbox</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-255"><code>	<a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html" class="ident">local</a>, <a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html" class="ident">domain</a> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
+<span class="codeline" id="line-256"><code>}</code></span>
+<span class="codeline" id="line-257"><code></code></span>
+<span class="codeline" id="line-258"><code><span class="keyword">func</span> (<label for="r20" class="ident">s</label> <a href="#line-254" class="ident">rfc2821Mailbox</a>) <label for="r21" class="ident"><a href="../../../use/crypto/x509..rfc2821Mailbox^1cdc3.String.html" class="ident">String</a></label>() <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-259"><code>	<span class="keyword">return</span> <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%s@%s"</span>, <label for="r20" class="ident">s</label>.<a href="#line-255" class="ident">local</a>, <label for="r20" class="ident">s</label>.<a href="#line-255" class="ident">domain</a>)</code></span>
+<span class="codeline" id="line-260"><code>}</code></span>
+<span class="codeline" id="line-261"><code></code></span>
+<span class="codeline" id="line-262"><code><span class="comment">// parseRFC2821Mailbox parses an email address into local and domain parts,</span></code></span>
+<span class="codeline" id="line-263"><code><span class="comment">// based on the ABNF for a “Mailbox” from RFC 2821. According to RFC 5280,</span></code></span>
+<span class="codeline" id="line-264"><code><span class="comment">// Section 4.2.1.6 that's correct for an rfc822Name from a certificate: “The</span></code></span>
+<span class="codeline" id="line-265"><code><span class="comment">// format of an rfc822Name is a "Mailbox" as defined in RFC 2821, Section 4.1.2”.</span></code></span>
+<span class="codeline" id="line-266"><code><span class="keyword">func</span> <label for="r22" class="ident"><a href="../../../pkg/crypto/x509.html#name-parseRFC2821Mailbox" class="ident">parseRFC2821Mailbox</a></label>(<label for="r23" class="ident">in</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) (<label for="r24" class="ident">mailbox</label> <a href="#line-254" class="ident">rfc2821Mailbox</a>, <label for="r25" class="ident">ok</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
+<span class="codeline" id="line-267"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-268"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-269"><code>	}</code></span>
 <span class="codeline" id="line-270"><code></code></span>
-<span class="codeline" id="line-271"><code>	<span class="keyword">if</span> <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">'"'</span> {</code></span>
-<span class="codeline" id="line-272"><code>		<span class="comment">// Quoted-string = DQUOTE *qcontent DQUOTE</span></code></span>
-<span class="codeline" id="line-273"><code><span class="comment">		// non-whitespace-control = %d1-8 / %d11 / %d12 / %d14-31 / %d127</span></code></span>
-<span class="codeline" id="line-274"><code><span class="comment">		// qcontent = qtext / quoted-pair</span></code></span>
-<span class="codeline" id="line-275"><code><span class="comment">		// qtext = non-whitespace-control /</span></code></span>
-<span class="codeline" id="line-276"><code><span class="comment">		//         %d33 / %d35-91 / %d93-126</span></code></span>
-<span class="codeline" id="line-277"><code><span class="comment">		// quoted-pair = ("\" text) / obs-qp</span></code></span>
-<span class="codeline" id="line-278"><code><span class="comment">		// text = %d1-9 / %d11 / %d12 / %d14-127 / obs-text</span></code></span>
-<span class="codeline" id="line-279"><code><span class="comment">		//</span></code></span>
-<span class="codeline" id="line-280"><code><span class="comment">		// (Names beginning with “obs-” are the obsolete syntax from RFC 2822,</span></code></span>
-<span class="codeline" id="line-281"><code><span class="comment">		// Section 4. Since it has been 16 years, we no longer accept that.)</span></code></span>
-<span class="codeline" id="line-282"><code>		<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-283"><code>	<label for="r27" class="ident">QuotedString</label>:</code></span>
-<span class="codeline" id="line-284"><code>		<span class="keyword">for</span> {</code></span>
-<span class="codeline" id="line-285"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-286"><code>				<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-287"><code>			}</code></span>
-<span class="codeline" id="line-288"><code>			<label for="r28" class="ident">c</label> := <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>]</code></span>
-<span class="codeline" id="line-289"><code>			<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-290"><code></code></span>
-<span class="codeline" id="line-291"><code>			<span class="keyword">switch</span> {</code></span>
-<span class="codeline" id="line-292"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">'"'</span>:</code></span>
-<span class="codeline" id="line-293"><code>				<span class="keyword">break</span> <label for="r27" class="ident">QuotedString</label></code></span>
-<span class="codeline" id="line-294"><code></code></span>
-<span class="codeline" id="line-295"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">'\\'</span>:</code></span>
-<span class="codeline" id="line-296"><code>				<span class="comment">// quoted-pair</span></code></span>
-<span class="codeline" id="line-297"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-298"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-299"><code>				}</code></span>
-<span class="codeline" id="line-300"><code>				<span class="keyword">if</span> <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">11</span> ||</code></span>
-<span class="codeline" id="line-301"><code>					<label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">12</span> ||</code></span>
-<span class="codeline" id="line-302"><code>					(<span class="lit-number">1</span> &lt;= <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &amp;&amp; <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &lt;= <span class="lit-number">9</span>) ||</code></span>
-<span class="codeline" id="line-303"><code>					(<span class="lit-number">14</span> &lt;= <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &amp;&amp; <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &lt;= <span class="lit-number">127</span>) {</code></span>
-<span class="codeline" id="line-304"><code>					<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>])</code></span>
-<span class="codeline" id="line-305"><code>					<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-306"><code>				} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-307"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-308"><code>				}</code></span>
-<span class="codeline" id="line-309"><code></code></span>
-<span class="codeline" id="line-310"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">11</span> ||</code></span>
-<span class="codeline" id="line-311"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">12</span> ||</code></span>
-<span class="codeline" id="line-312"><code>				<span class="comment">// Space (char 32) is not allowed based on the</span></code></span>
-<span class="codeline" id="line-313"><code><span class="comment">				// BNF, but RFC 3696 gives an example that</span></code></span>
-<span class="codeline" id="line-314"><code><span class="comment">				// assumes that it is. Several “verified”</span></code></span>
-<span class="codeline" id="line-315"><code><span class="comment">				// errata continue to argue about this point.</span></code></span>
-<span class="codeline" id="line-316"><code><span class="comment">				// We choose to accept it.</span></code></span>
-<span class="codeline" id="line-317"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">32</span> ||</code></span>
-<span class="codeline" id="line-318"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">33</span> ||</code></span>
-<span class="codeline" id="line-319"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">127</span> ||</code></span>
-<span class="codeline" id="line-320"><code>				(<span class="lit-number">1</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">8</span>) ||</code></span>
-<span class="codeline" id="line-321"><code>				(<span class="lit-number">14</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">31</span>) ||</code></span>
-<span class="codeline" id="line-322"><code>				(<span class="lit-number">35</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">91</span>) ||</code></span>
-<span class="codeline" id="line-323"><code>				(<span class="lit-number">93</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">126</span>):</code></span>
-<span class="codeline" id="line-324"><code>				<span class="comment">// qtext</span></code></span>
-<span class="codeline" id="line-325"><code>				<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r28" class="ident">c</label>)</code></span>
-<span class="codeline" id="line-326"><code></code></span>
-<span class="codeline" id="line-327"><code>			<span class="keyword">default</span>:</code></span>
-<span class="codeline" id="line-328"><code>				<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-329"><code>			}</code></span>
-<span class="codeline" id="line-330"><code>		}</code></span>
-<span class="codeline" id="line-331"><code>	} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-332"><code>		<span class="comment">// Atom ("." Atom)*</span></code></span>
-<span class="codeline" id="line-333"><code>	<label for="r29" class="ident">NextChar</label>:</code></span>
-<span class="codeline" id="line-334"><code>		<span class="keyword">for</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-335"><code>			<span class="comment">// atext from RFC 2822, Section 3.2.4</span></code></span>
-<span class="codeline" id="line-336"><code>			<label for="r30" class="ident">c</label> := <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>]</code></span>
-<span class="codeline" id="line-337"><code></code></span>
-<span class="codeline" id="line-338"><code>			<span class="keyword">switch</span> {</code></span>
-<span class="codeline" id="line-339"><code>			<span class="keyword">case</span> <label for="r30" class="ident">c</label> == <span class="lit-number">'\\'</span>:</code></span>
-<span class="codeline" id="line-340"><code>				<span class="comment">// Examples given in RFC 3696 suggest that</span></code></span>
-<span class="codeline" id="line-341"><code><span class="comment">				// escaped characters can appear outside of a</span></code></span>
-<span class="codeline" id="line-342"><code><span class="comment">				// quoted string. Several “verified” errata</span></code></span>
-<span class="codeline" id="line-343"><code><span class="comment">				// continue to argue the point. We choose to</span></code></span>
-<span class="codeline" id="line-344"><code><span class="comment">				// accept it.</span></code></span>
-<span class="codeline" id="line-345"><code>				<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-346"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-347"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-348"><code>				}</code></span>
-<span class="codeline" id="line-349"><code>				<span class="keyword">fallthrough</span></code></span>
-<span class="codeline" id="line-350"><code></code></span>
-<span class="codeline" id="line-351"><code>			<span class="keyword">case</span> (<span class="lit-number">'0'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'9'</span>) ||</code></span>
-<span class="codeline" id="line-352"><code>				(<span class="lit-number">'a'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'z'</span>) ||</code></span>
-<span class="codeline" id="line-353"><code>				(<span class="lit-number">'A'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span>) ||</code></span>
-<span class="codeline" id="line-354"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'!'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'#'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'$'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'%'</span> ||</code></span>
-<span class="codeline" id="line-355"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'&amp;'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'\''</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'*'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'+'</span> ||</code></span>
-<span class="codeline" id="line-356"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'-'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'/'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'='</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'?'</span> ||</code></span>
-<span class="codeline" id="line-357"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'^'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'_'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'`'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'{'</span> ||</code></span>
-<span class="codeline" id="line-358"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'|'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'}'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'~'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'.'</span>:</code></span>
-<span class="codeline" id="line-359"><code>				<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>])</code></span>
-<span class="codeline" id="line-360"><code>				<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-361"><code></code></span>
-<span class="codeline" id="line-362"><code>			<span class="keyword">default</span>:</code></span>
-<span class="codeline" id="line-363"><code>				<span class="keyword">break</span> <label for="r29" class="ident">NextChar</label></code></span>
-<span class="codeline" id="line-364"><code>			}</code></span>
-<span class="codeline" id="line-365"><code>		}</code></span>
-<span class="codeline" id="line-366"><code></code></span>
-<span class="codeline" id="line-367"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r26" class="ident">localPartBytes</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-368"><code>			<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-369"><code>		}</code></span>
-<span class="codeline" id="line-370"><code></code></span>
-<span class="codeline" id="line-371"><code>		<span class="comment">// From RFC 3696, Section 3:</span></code></span>
-<span class="codeline" id="line-372"><code><span class="comment">		// “period (".") may also appear, but may not be used to start</span></code></span>
-<span class="codeline" id="line-373"><code><span class="comment">		// or end the local part, nor may two or more consecutive</span></code></span>
-<span class="codeline" id="line-374"><code><span class="comment">		// periods appear.”</span></code></span>
-<span class="codeline" id="line-375"><code>		<label for="r31" class="ident">twoDots</label> := []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>{<span class="lit-number">'.'</span>, <span class="lit-number">'.'</span>}</code></span>
-<span class="codeline" id="line-376"><code>		<span class="keyword">if</span> <label for="r26" class="ident">localPartBytes</label>[<span class="lit-number">0</span>] == <span class="lit-number">'.'</span> ||</code></span>
-<span class="codeline" id="line-377"><code>			<label for="r26" class="ident">localPartBytes</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r26" class="ident">localPartBytes</label>)-<span class="lit-number">1</span>] == <span class="lit-number">'.'</span> ||</code></span>
-<span class="codeline" id="line-378"><code>			<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-77" class="ident">Contains</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r31" class="ident">twoDots</label>) {</code></span>
-<span class="codeline" id="line-379"><code>			<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-380"><code>		}</code></span>
-<span class="codeline" id="line-381"><code>	}</code></span>
-<span class="codeline" id="line-382"><code></code></span>
-<span class="codeline" id="line-383"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> || <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] != <span class="lit-number">'@'</span> {</code></span>
-<span class="codeline" id="line-384"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-385"><code>	}</code></span>
-<span class="codeline" id="line-386"><code>	<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
-<span class="codeline" id="line-387"><code></code></span>
-<span class="codeline" id="line-388"><code>	<span class="comment">// The RFC species a format for domains, but that's known to be</span></code></span>
-<span class="codeline" id="line-389"><code><span class="comment">	// violated in practice so we accept that anything after an '@' is the</span></code></span>
-<span class="codeline" id="line-390"><code><span class="comment">	// domain part.</span></code></span>
-<span class="codeline" id="line-391"><code>	<span class="keyword">if</span> <label for="r32" class="ident">_</label>, <label for="r33" class="ident">ok</label> := <a href="#line-402" class="ident">domainToReverseLabels</a>(<label for="r23" class="ident">in</label>); !<label for="r33" class="ident">ok</label> {</code></span>
-<span class="codeline" id="line-392"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-393"><code>	}</code></span>
-<span class="codeline" id="line-394"><code></code></span>
-<span class="codeline" id="line-395"><code>	<label for="r24" class="ident">mailbox</label>.<a href="#line-253" class="ident">local</a> = <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r26" class="ident">localPartBytes</label>)</code></span>
-<span class="codeline" id="line-396"><code>	<label for="r24" class="ident">mailbox</label>.<a href="#line-253" class="ident">domain</a> = <label for="r23" class="ident">in</label></code></span>
-<span class="codeline" id="line-397"><code>	<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-398"><code>}</code></span>
-<span class="codeline" id="line-399"><code></code></span>
-<span class="codeline" id="line-400"><code><span class="comment">// domainToReverseLabels converts a textual domain name like foo.example.com to</span></code></span>
-<span class="codeline" id="line-401"><code><span class="comment">// the list of labels in reverse order, e.g. ["com", "example", "foo"].</span></code></span>
-<span class="codeline" id="line-402"><code><span class="keyword">func</span> <label for="r34" class="ident"><a href="../../../pkg/crypto/x509.html#name-domainToReverseLabels" class="ident">domainToReverseLabels</a></label>(<label for="r35" class="ident">domain</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) (<label for="r36" class="ident">reverseLabels</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r37" class="ident">ok</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
-<span class="codeline" id="line-403"><code>	<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <span class="lit-number">0</span>, <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-42" class="ident">Count</a>(<label for="r35" class="ident">domain</label>, <span class="lit-string">"."</span>)+<span class="lit-number">1</span>)</code></span>
-<span class="codeline" id="line-404"><code>	<span class="keyword">for</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r35" class="ident">domain</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-405"><code>		<span class="keyword">if</span> <label for="r38" class="ident">i</label> := <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-285" class="ident">LastIndexByte</a>(<label for="r35" class="ident">domain</label>, <span class="lit-number">'.'</span>); <label for="r38" class="ident">i</label> == -<span class="lit-number">1</span> {</code></span>
-<span class="codeline" id="line-406"><code>			<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <label for="r35" class="ident">domain</label>)</code></span>
-<span class="codeline" id="line-407"><code>			<label for="r35" class="ident">domain</label> = <span class="lit-string">""</span></code></span>
-<span class="codeline" id="line-408"><code>		} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-409"><code>			<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <label for="r35" class="ident">domain</label>[<label for="r38" class="ident">i</label>+<span class="lit-number">1</span>:])</code></span>
-<span class="codeline" id="line-410"><code>			<label for="r35" class="ident">domain</label> = <label for="r35" class="ident">domain</label>[:<label for="r38" class="ident">i</label>]</code></span>
-<span class="codeline" id="line-411"><code>			<span class="keyword">if</span> <label for="r38" class="ident">i</label> == <span class="lit-number">0</span> { <span class="comment">// domain == ""</span></code></span>
-<span class="codeline" id="line-412"><code>				<span class="comment">// domain is prefixed with an empty label, append an empty</span></code></span>
-<span class="codeline" id="line-413"><code><span class="comment">				// string to reverseLabels to indicate this.</span></code></span>
-<span class="codeline" id="line-414"><code>				<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <span class="lit-string">""</span>)</code></span>
-<span class="codeline" id="line-415"><code>			}</code></span>
-<span class="codeline" id="line-416"><code>		}</code></span>
-<span class="codeline" id="line-417"><code>	}</code></span>
-<span class="codeline" id="line-418"><code></code></span>
-<span class="codeline" id="line-419"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r36" class="ident">reverseLabels</label>) &gt; <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r36" class="ident">reverseLabels</label>[<span class="lit-number">0</span>]) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-420"><code>		<span class="comment">// An empty label at the end indicates an absolute value.</span></code></span>
-<span class="codeline" id="line-421"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-422"><code>	}</code></span>
-<span class="codeline" id="line-423"><code></code></span>
-<span class="codeline" id="line-424"><code>	<span class="keyword">for</span> <label for="r39" class="ident">_</label>, <label for="r40" class="ident">label</label> := <span class="keyword">range</span> <label for="r36" class="ident">reverseLabels</label> {</code></span>
-<span class="codeline" id="line-425"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r40" class="ident">label</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-426"><code>			<span class="comment">// Empty labels are otherwise invalid.</span></code></span>
-<span class="codeline" id="line-427"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-428"><code>		}</code></span>
-<span class="codeline" id="line-429"><code></code></span>
-<span class="codeline" id="line-430"><code>		<span class="keyword">for</span> <label for="r41" class="ident">_</label>, <label for="r42" class="ident">c</label> := <span class="keyword">range</span> <label for="r40" class="ident">label</label> {</code></span>
-<span class="codeline" id="line-431"><code>			<span class="keyword">if</span> <label for="r42" class="ident">c</label> &lt; <span class="lit-number">33</span> || <label for="r42" class="ident">c</label> &gt; <span class="lit-number">126</span> {</code></span>
-<span class="codeline" id="line-432"><code>				<span class="comment">// Invalid character.</span></code></span>
-<span class="codeline" id="line-433"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-434"><code>			}</code></span>
-<span class="codeline" id="line-435"><code>		}</code></span>
-<span class="codeline" id="line-436"><code>	}</code></span>
-<span class="codeline" id="line-437"><code></code></span>
-<span class="codeline" id="line-438"><code>	<span class="keyword">return</span> <label for="r36" class="ident">reverseLabels</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-439"><code>}</code></span>
-<span class="codeline" id="line-440"><code></code></span>
-<span class="codeline" id="line-441"><code><span class="comment">// isValid performs validity checks on c given that it is a candidate to append</span></code></span>
-<span class="codeline" id="line-442"><code><span class="comment">// to the chain in currentChain.</span></code></span>
-<span class="codeline" id="line-443"><code><span class="keyword">func</span> (<label for="r43" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r44" class="ident"><a href="../../../use/crypto/x509..Certificate.isValid^5339b.html" class="ident">isValid</a></label>(<label for="r45" class="ident">certType</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r46" class="ident">currentChain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r47" class="ident">opts</label> *<a href="#line-192" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
-<span class="codeline" id="line-444"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-744" class="ident">UnhandledCriticalExtensions</a>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-445"><code>		<span class="keyword">return</span> <a href="x509.go.html#line-1052" class="ident">UnhandledCriticalExtension</a>{}</code></span>
-<span class="codeline" id="line-446"><code>	}</code></span>
-<span class="codeline" id="line-447"><code></code></span>
-<span class="codeline" id="line-448"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-449"><code>		<label for="r48" class="ident">child</label> := <label for="r46" class="ident">currentChain</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>)-<span class="lit-number">1</span>]</code></span>
-<span class="codeline" id="line-450"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r48" class="ident">child</label>.<a href="x509.go.html#line-709" class="ident">RawIssuer</a>, <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>) {</code></span>
-<span class="codeline" id="line-451"><code>			<span class="keyword">return</span> <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-44" class="ident">NameMismatch</a>, <span class="lit-string">""</span>}</code></span>
-<span class="codeline" id="line-452"><code>		}</code></span>
-<span class="codeline" id="line-453"><code>	}</code></span>
-<span class="codeline" id="line-454"><code></code></span>
-<span class="codeline" id="line-455"><code>	<label for="r49" class="ident">now</label> := <label for="r47" class="ident">opts</label>.<a href="#line-207" class="ident">CurrentTime</a></code></span>
-<span class="codeline" id="line-456"><code>	<span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-262" class="ident">IsZero</a>() {</code></span>
-<span class="codeline" id="line-457"><code>		<label for="r49" class="ident">now</label> = <a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/time.go.html#line-1347" class="ident">Now</a>()</code></span>
-<span class="codeline" id="line-458"><code>	}</code></span>
-<span class="codeline" id="line-459"><code>	<span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-281" class="ident">Before</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotBefore</a>) {</code></span>
-<span class="codeline" id="line-460"><code>		<span class="keyword">return</span> <a href="#line-66" class="ident">CertificateInvalidError</a>{</code></span>
-<span class="codeline" id="line-461"><code>			<a href="#line-67" class="ident">Cert</a>:   <label for="r43" class="ident">c</label>,</code></span>
-<span class="codeline" id="line-462"><code>			<a href="#line-68" class="ident">Reason</a>: <a href="#line-31" class="ident">Expired</a>,</code></span>
-<span class="codeline" id="line-463"><code>			<a href="#line-69" class="ident">Detail</a>: <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"current time %s is before %s"</span>, <label for="r49" class="ident">now</label>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>), <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotBefore</a>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>)),</code></span>
-<span class="codeline" id="line-464"><code>		}</code></span>
-<span class="codeline" id="line-465"><code>	} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotAfter</a>) {</code></span>
-<span class="codeline" id="line-466"><code>		<span class="keyword">return</span> <a href="#line-66" class="ident">CertificateInvalidError</a>{</code></span>
-<span class="codeline" id="line-467"><code>			<a href="#line-67" class="ident">Cert</a>:   <label for="r43" class="ident">c</label>,</code></span>
-<span class="codeline" id="line-468"><code>			<a href="#line-68" class="ident">Reason</a>: <a href="#line-31" class="ident">Expired</a>,</code></span>
-<span class="codeline" id="line-469"><code>			<a href="#line-69" class="ident">Detail</a>: <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"current time %s is after %s"</span>, <label for="r49" class="ident">now</label>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>), <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotAfter</a>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i11">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>)),</code></span>
-<span class="codeline" id="line-470"><code>		}</code></span>
-<span class="codeline" id="line-471"><code>	}</code></span>
-<span class="codeline" id="line-472"><code></code></span>
-<span class="codeline" id="line-473"><code>	<span class="keyword">if</span> <label for="r45" class="ident">certType</label> == <a href="#line-245" class="ident">intermediateCertificate</a> || <label for="r45" class="ident">certType</label> == <a href="#line-246" class="ident">rootCertificate</a> {</code></span>
-<span class="codeline" id="line-474"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-475"><code>			<span class="keyword">return</span> <a href="../../../pkg/errors.html" class="ident i3">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: internal error: empty chain when appending CA cert"</span>)</code></span>
-<span class="codeline" id="line-476"><code>		}</code></span>
-<span class="codeline" id="line-477"><code>	}</code></span>
-<span class="codeline" id="line-478"><code></code></span>
-<span class="codeline" id="line-479"><code>	<span class="comment">// KeyUsage status flags are ignored. From Engineering Security, Peter</span></code></span>
-<span class="codeline" id="line-480"><code><span class="comment">	// Gutmann: A European government CA marked its signing certificates as</span></code></span>
-<span class="codeline" id="line-481"><code><span class="comment">	// being valid for encryption only, but no-one noticed. Another</span></code></span>
-<span class="codeline" id="line-482"><code><span class="comment">	// European CA marked its signature keys as not being valid for</span></code></span>
-<span class="codeline" id="line-483"><code><span class="comment">	// signatures. A different CA marked its own trusted root certificate</span></code></span>
-<span class="codeline" id="line-484"><code><span class="comment">	// as being invalid for certificate signing. Another national CA</span></code></span>
-<span class="codeline" id="line-485"><code><span class="comment">	// distributed a certificate to be used to encrypt data for the</span></code></span>
-<span class="codeline" id="line-486"><code><span class="comment">	// country’s tax authority that was marked as only being usable for</span></code></span>
-<span class="codeline" id="line-487"><code><span class="comment">	// digital signatures but not for encryption. Yet another CA reversed</span></code></span>
-<span class="codeline" id="line-488"><code><span class="comment">	// the order of the bit flags in the keyUsage due to confusion over</span></code></span>
-<span class="codeline" id="line-489"><code><span class="comment">	// encoding endianness, essentially setting a random keyUsage in</span></code></span>
-<span class="codeline" id="line-490"><code><span class="comment">	// certificates that it issued. Another CA created a self-invalidating</span></code></span>
-<span class="codeline" id="line-491"><code><span class="comment">	// certificate by adding a certificate policy statement stipulating</span></code></span>
-<span class="codeline" id="line-492"><code><span class="comment">	// that the certificate had to be used strictly as specified in the</span></code></span>
-<span class="codeline" id="line-493"><code><span class="comment">	// keyUsage, and a keyUsage containing a flag indicating that the RSA</span></code></span>
-<span class="codeline" id="line-494"><code><span class="comment">	// encryption key could only be used for Diffie-Hellman key agreement.</span></code></span>
-<span class="codeline" id="line-495"><code></code></span>
-<span class="codeline" id="line-496"><code>	<span class="keyword">if</span> <label for="r45" class="ident">certType</label> == <a href="#line-245" class="ident">intermediateCertificate</a> &amp;&amp; (!<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-751" class="ident">BasicConstraintsValid</a> || !<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-752" class="ident">IsCA</a>) {</code></span>
-<span class="codeline" id="line-497"><code>		<span class="keyword">return</span> <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-28" class="ident">NotAuthorizedToSign</a>, <span class="lit-string">""</span>}</code></span>
-<span class="codeline" id="line-498"><code>	}</code></span>
-<span class="codeline" id="line-499"><code></code></span>
-<span class="codeline" id="line-500"><code>	<span class="keyword">if</span> <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-751" class="ident">BasicConstraintsValid</a> &amp;&amp; <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-766" class="ident">MaxPathLen</a> &gt;= <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-501"><code>		<label for="r50" class="ident">numIntermediates</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) - <span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-502"><code>		<span class="keyword">if</span> <label for="r50" class="ident">numIntermediates</label> &gt; <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-766" class="ident">MaxPathLen</a> {</code></span>
-<span class="codeline" id="line-503"><code>			<span class="keyword">return</span> <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-38" class="ident">TooManyIntermediates</a>, <span class="lit-string">""</span>}</code></span>
-<span class="codeline" id="line-504"><code>		}</code></span>
-<span class="codeline" id="line-505"><code>	}</code></span>
-<span class="codeline" id="line-506"><code></code></span>
-<span class="codeline" id="line-507"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-508"><code>}</code></span>
-<span class="codeline" id="line-509"><code></code></span>
-<span class="codeline" id="line-510"><code><span class="comment">// Verify attempts to verify c by building one or more chains from c to a</span></code></span>
-<span class="codeline" id="line-511"><code><span class="comment">// certificate in opts.Roots, using certificates in opts.Intermediates if</span></code></span>
-<span class="codeline" id="line-512"><code><span class="comment">// needed. If successful, it returns one or more chains where the first</span></code></span>
-<span class="codeline" id="line-513"><code><span class="comment">// element of the chain is c and the last element is from opts.Roots.</span></code></span>
-<span class="codeline" id="line-514"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-515"><code><span class="comment">// If opts.Roots is nil, the platform verifier might be used, and</span></code></span>
-<span class="codeline" id="line-516"><code><span class="comment">// verification details might differ from what is described below. If system</span></code></span>
-<span class="codeline" id="line-517"><code><span class="comment">// roots are unavailable the returned error will be of type SystemRootsError.</span></code></span>
-<span class="codeline" id="line-518"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-519"><code><span class="comment">// Name constraints in the intermediates will be applied to all names claimed</span></code></span>
-<span class="codeline" id="line-520"><code><span class="comment">// in the chain, not just opts.DNSName. Thus it is invalid for a leaf to claim</span></code></span>
-<span class="codeline" id="line-521"><code><span class="comment">// example.com if an intermediate doesn't permit it, even if example.com is not</span></code></span>
-<span class="codeline" id="line-522"><code><span class="comment">// the name being validated. Note that DirectoryName constraints are not</span></code></span>
-<span class="codeline" id="line-523"><code><span class="comment">// supported.</span></code></span>
-<span class="codeline" id="line-524"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-525"><code><span class="comment">// Name constraint validation follows the rules from RFC 5280, with the</span></code></span>
-<span class="codeline" id="line-526"><code><span class="comment">// addition that DNS name constraints may use the leading period format</span></code></span>
-<span class="codeline" id="line-527"><code><span class="comment">// defined for emails and URIs. When a constraint has a leading period</span></code></span>
-<span class="codeline" id="line-528"><code><span class="comment">// it indicates that at least one additional label must be prepended to</span></code></span>
-<span class="codeline" id="line-529"><code><span class="comment">// the constrained name to be considered valid.</span></code></span>
-<span class="codeline" id="line-530"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-531"><code><span class="comment">// Extended Key Usage values are enforced nested down a chain, so an intermediate</span></code></span>
-<span class="codeline" id="line-532"><code><span class="comment">// or root that enumerates EKUs prevents a leaf from asserting an EKU not in that</span></code></span>
-<span class="codeline" id="line-533"><code><span class="comment">// list. (While this is not specified, it is common practice in order to limit</span></code></span>
-<span class="codeline" id="line-534"><code><span class="comment">// the types of certificates a CA can issue.)</span></code></span>
-<span class="codeline" id="line-535"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-536"><code><span class="comment">// Certificates that use SHA1WithRSA and ECDSAWithSHA1 signatures are not supported,</span></code></span>
-<span class="codeline" id="line-537"><code><span class="comment">// and will not be used to build chains.</span></code></span>
-<span class="codeline" id="line-538"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-539"><code><span class="comment">// Certificates other than c in the returned chains should not be modified.</span></code></span>
+<span class="codeline" id="line-271"><code>	<label for="r26" class="ident">localPartBytes</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>, <span class="lit-number">0</span>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>)/<span class="lit-number">2</span>)</code></span>
+<span class="codeline" id="line-272"><code></code></span>
+<span class="codeline" id="line-273"><code>	<span class="keyword">if</span> <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">'"'</span> {</code></span>
+<span class="codeline" id="line-274"><code>		<span class="comment">// Quoted-string = DQUOTE *qcontent DQUOTE</span></code></span>
+<span class="codeline" id="line-275"><code><span class="comment">		// non-whitespace-control = %d1-8 / %d11 / %d12 / %d14-31 / %d127</span></code></span>
+<span class="codeline" id="line-276"><code><span class="comment">		// qcontent = qtext / quoted-pair</span></code></span>
+<span class="codeline" id="line-277"><code><span class="comment">		// qtext = non-whitespace-control /</span></code></span>
+<span class="codeline" id="line-278"><code><span class="comment">		//         %d33 / %d35-91 / %d93-126</span></code></span>
+<span class="codeline" id="line-279"><code><span class="comment">		// quoted-pair = ("\" text) / obs-qp</span></code></span>
+<span class="codeline" id="line-280"><code><span class="comment">		// text = %d1-9 / %d11 / %d12 / %d14-127 / obs-text</span></code></span>
+<span class="codeline" id="line-281"><code><span class="comment">		//</span></code></span>
+<span class="codeline" id="line-282"><code><span class="comment">		// (Names beginning with “obs-” are the obsolete syntax from RFC 2822,</span></code></span>
+<span class="codeline" id="line-283"><code><span class="comment">		// Section 4. Since it has been 16 years, we no longer accept that.)</span></code></span>
+<span class="codeline" id="line-284"><code>		<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-285"><code>	<label for="r27" class="ident">QuotedString</label>:</code></span>
+<span class="codeline" id="line-286"><code>		<span class="keyword">for</span> {</code></span>
+<span class="codeline" id="line-287"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-288"><code>				<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-289"><code>			}</code></span>
+<span class="codeline" id="line-290"><code>			<label for="r28" class="ident">c</label> := <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>]</code></span>
+<span class="codeline" id="line-291"><code>			<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-292"><code></code></span>
+<span class="codeline" id="line-293"><code>			<span class="keyword">switch</span> {</code></span>
+<span class="codeline" id="line-294"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">'"'</span>:</code></span>
+<span class="codeline" id="line-295"><code>				<span class="keyword">break</span> <label for="r27" class="ident">QuotedString</label></code></span>
+<span class="codeline" id="line-296"><code></code></span>
+<span class="codeline" id="line-297"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">'\\'</span>:</code></span>
+<span class="codeline" id="line-298"><code>				<span class="comment">// quoted-pair</span></code></span>
+<span class="codeline" id="line-299"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-300"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-301"><code>				}</code></span>
+<span class="codeline" id="line-302"><code>				<span class="keyword">if</span> <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">11</span> ||</code></span>
+<span class="codeline" id="line-303"><code>					<label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] == <span class="lit-number">12</span> ||</code></span>
+<span class="codeline" id="line-304"><code>					(<span class="lit-number">1</span> &lt;= <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &amp;&amp; <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &lt;= <span class="lit-number">9</span>) ||</code></span>
+<span class="codeline" id="line-305"><code>					(<span class="lit-number">14</span> &lt;= <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &amp;&amp; <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] &lt;= <span class="lit-number">127</span>) {</code></span>
+<span class="codeline" id="line-306"><code>					<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>])</code></span>
+<span class="codeline" id="line-307"><code>					<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-308"><code>				} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-309"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-310"><code>				}</code></span>
+<span class="codeline" id="line-311"><code></code></span>
+<span class="codeline" id="line-312"><code>			<span class="keyword">case</span> <label for="r28" class="ident">c</label> == <span class="lit-number">11</span> ||</code></span>
+<span class="codeline" id="line-313"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">12</span> ||</code></span>
+<span class="codeline" id="line-314"><code>				<span class="comment">// Space (char 32) is not allowed based on the</span></code></span>
+<span class="codeline" id="line-315"><code><span class="comment">				// BNF, but RFC 3696 gives an example that</span></code></span>
+<span class="codeline" id="line-316"><code><span class="comment">				// assumes that it is. Several “verified”</span></code></span>
+<span class="codeline" id="line-317"><code><span class="comment">				// errata continue to argue about this point.</span></code></span>
+<span class="codeline" id="line-318"><code><span class="comment">				// We choose to accept it.</span></code></span>
+<span class="codeline" id="line-319"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">32</span> ||</code></span>
+<span class="codeline" id="line-320"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">33</span> ||</code></span>
+<span class="codeline" id="line-321"><code>				<label for="r28" class="ident">c</label> == <span class="lit-number">127</span> ||</code></span>
+<span class="codeline" id="line-322"><code>				(<span class="lit-number">1</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">8</span>) ||</code></span>
+<span class="codeline" id="line-323"><code>				(<span class="lit-number">14</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">31</span>) ||</code></span>
+<span class="codeline" id="line-324"><code>				(<span class="lit-number">35</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">91</span>) ||</code></span>
+<span class="codeline" id="line-325"><code>				(<span class="lit-number">93</span> &lt;= <label for="r28" class="ident">c</label> &amp;&amp; <label for="r28" class="ident">c</label> &lt;= <span class="lit-number">126</span>):</code></span>
+<span class="codeline" id="line-326"><code>				<span class="comment">// qtext</span></code></span>
+<span class="codeline" id="line-327"><code>				<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r28" class="ident">c</label>)</code></span>
+<span class="codeline" id="line-328"><code></code></span>
+<span class="codeline" id="line-329"><code>			<span class="keyword">default</span>:</code></span>
+<span class="codeline" id="line-330"><code>				<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-331"><code>			}</code></span>
+<span class="codeline" id="line-332"><code>		}</code></span>
+<span class="codeline" id="line-333"><code>	} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-334"><code>		<span class="comment">// Atom ("." Atom)*</span></code></span>
+<span class="codeline" id="line-335"><code>	<label for="r29" class="ident">NextChar</label>:</code></span>
+<span class="codeline" id="line-336"><code>		<span class="keyword">for</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-337"><code>			<span class="comment">// atext from RFC 2822, Section 3.2.4</span></code></span>
+<span class="codeline" id="line-338"><code>			<label for="r30" class="ident">c</label> := <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>]</code></span>
+<span class="codeline" id="line-339"><code></code></span>
+<span class="codeline" id="line-340"><code>			<span class="keyword">switch</span> {</code></span>
+<span class="codeline" id="line-341"><code>			<span class="keyword">case</span> <label for="r30" class="ident">c</label> == <span class="lit-number">'\\'</span>:</code></span>
+<span class="codeline" id="line-342"><code>				<span class="comment">// Examples given in RFC 3696 suggest that</span></code></span>
+<span class="codeline" id="line-343"><code><span class="comment">				// escaped characters can appear outside of a</span></code></span>
+<span class="codeline" id="line-344"><code><span class="comment">				// quoted string. Several “verified” errata</span></code></span>
+<span class="codeline" id="line-345"><code><span class="comment">				// continue to argue the point. We choose to</span></code></span>
+<span class="codeline" id="line-346"><code><span class="comment">				// accept it.</span></code></span>
+<span class="codeline" id="line-347"><code>				<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-348"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-349"><code>					<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-350"><code>				}</code></span>
+<span class="codeline" id="line-351"><code>				<span class="keyword">fallthrough</span></code></span>
+<span class="codeline" id="line-352"><code></code></span>
+<span class="codeline" id="line-353"><code>			<span class="keyword">case</span> (<span class="lit-number">'0'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'9'</span>) ||</code></span>
+<span class="codeline" id="line-354"><code>				(<span class="lit-number">'a'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'z'</span>) ||</code></span>
+<span class="codeline" id="line-355"><code>				(<span class="lit-number">'A'</span> &lt;= <label for="r30" class="ident">c</label> &amp;&amp; <label for="r30" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span>) ||</code></span>
+<span class="codeline" id="line-356"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'!'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'#'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'$'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'%'</span> ||</code></span>
+<span class="codeline" id="line-357"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'&amp;'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'\''</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'*'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'+'</span> ||</code></span>
+<span class="codeline" id="line-358"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'-'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'/'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'='</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'?'</span> ||</code></span>
+<span class="codeline" id="line-359"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'^'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'_'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'`'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'{'</span> ||</code></span>
+<span class="codeline" id="line-360"><code>				<label for="r30" class="ident">c</label> == <span class="lit-number">'|'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'}'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'~'</span> || <label for="r30" class="ident">c</label> == <span class="lit-number">'.'</span>:</code></span>
+<span class="codeline" id="line-361"><code>				<label for="r26" class="ident">localPartBytes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>])</code></span>
+<span class="codeline" id="line-362"><code>				<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-363"><code></code></span>
+<span class="codeline" id="line-364"><code>			<span class="keyword">default</span>:</code></span>
+<span class="codeline" id="line-365"><code>				<span class="keyword">break</span> <label for="r29" class="ident">NextChar</label></code></span>
+<span class="codeline" id="line-366"><code>			}</code></span>
+<span class="codeline" id="line-367"><code>		}</code></span>
+<span class="codeline" id="line-368"><code></code></span>
+<span class="codeline" id="line-369"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r26" class="ident">localPartBytes</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-370"><code>			<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-371"><code>		}</code></span>
+<span class="codeline" id="line-372"><code></code></span>
+<span class="codeline" id="line-373"><code>		<span class="comment">// From RFC 3696, Section 3:</span></code></span>
+<span class="codeline" id="line-374"><code><span class="comment">		// “period (".") may also appear, but may not be used to start</span></code></span>
+<span class="codeline" id="line-375"><code><span class="comment">		// or end the local part, nor may two or more consecutive</span></code></span>
+<span class="codeline" id="line-376"><code><span class="comment">		// periods appear.”</span></code></span>
+<span class="codeline" id="line-377"><code>		<label for="r31" class="ident">twoDots</label> := []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>{<span class="lit-number">'.'</span>, <span class="lit-number">'.'</span>}</code></span>
+<span class="codeline" id="line-378"><code>		<span class="keyword">if</span> <label for="r26" class="ident">localPartBytes</label>[<span class="lit-number">0</span>] == <span class="lit-number">'.'</span> ||</code></span>
+<span class="codeline" id="line-379"><code>			<label for="r26" class="ident">localPartBytes</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r26" class="ident">localPartBytes</label>)-<span class="lit-number">1</span>] == <span class="lit-number">'.'</span> ||</code></span>
+<span class="codeline" id="line-380"><code>			<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-77" class="ident">Contains</a>(<label for="r26" class="ident">localPartBytes</label>, <label for="r31" class="ident">twoDots</label>) {</code></span>
+<span class="codeline" id="line-381"><code>			<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-382"><code>		}</code></span>
+<span class="codeline" id="line-383"><code>	}</code></span>
+<span class="codeline" id="line-384"><code></code></span>
+<span class="codeline" id="line-385"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r23" class="ident">in</label>) == <span class="lit-number">0</span> || <label for="r23" class="ident">in</label>[<span class="lit-number">0</span>] != <span class="lit-number">'@'</span> {</code></span>
+<span class="codeline" id="line-386"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-387"><code>	}</code></span>
+<span class="codeline" id="line-388"><code>	<label for="r23" class="ident">in</label> = <label for="r23" class="ident">in</label>[<span class="lit-number">1</span>:]</code></span>
+<span class="codeline" id="line-389"><code></code></span>
+<span class="codeline" id="line-390"><code>	<span class="comment">// The RFC species a format for domains, but that's known to be</span></code></span>
+<span class="codeline" id="line-391"><code><span class="comment">	// violated in practice so we accept that anything after an '@' is the</span></code></span>
+<span class="codeline" id="line-392"><code><span class="comment">	// domain part.</span></code></span>
+<span class="codeline" id="line-393"><code>	<span class="keyword">if</span> <label for="r32" class="ident">_</label>, <label for="r33" class="ident">ok</label> := <a href="#line-404" class="ident">domainToReverseLabels</a>(<label for="r23" class="ident">in</label>); !<label for="r33" class="ident">ok</label> {</code></span>
+<span class="codeline" id="line-394"><code>		<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-395"><code>	}</code></span>
+<span class="codeline" id="line-396"><code></code></span>
+<span class="codeline" id="line-397"><code>	<label for="r24" class="ident">mailbox</label>.<a href="#line-255" class="ident">local</a> = <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r26" class="ident">localPartBytes</label>)</code></span>
+<span class="codeline" id="line-398"><code>	<label for="r24" class="ident">mailbox</label>.<a href="#line-255" class="ident">domain</a> = <label for="r23" class="ident">in</label></code></span>
+<span class="codeline" id="line-399"><code>	<span class="keyword">return</span> <label for="r24" class="ident">mailbox</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-400"><code>}</code></span>
+<span class="codeline" id="line-401"><code></code></span>
+<span class="codeline" id="line-402"><code><span class="comment">// domainToReverseLabels converts a textual domain name like foo.example.com to</span></code></span>
+<span class="codeline" id="line-403"><code><span class="comment">// the list of labels in reverse order, e.g. ["com", "example", "foo"].</span></code></span>
+<span class="codeline" id="line-404"><code><span class="keyword">func</span> <label for="r34" class="ident"><a href="../../../pkg/crypto/x509.html#name-domainToReverseLabels" class="ident">domainToReverseLabels</a></label>(<label for="r35" class="ident">domain</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) (<label for="r36" class="ident">reverseLabels</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r37" class="ident">ok</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) {</code></span>
+<span class="codeline" id="line-405"><code>	<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <span class="lit-number">0</span>, <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-42" class="ident">Count</a>(<label for="r35" class="ident">domain</label>, <span class="lit-string">"."</span>)+<span class="lit-number">1</span>)</code></span>
+<span class="codeline" id="line-406"><code>	<span class="keyword">for</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r35" class="ident">domain</label>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-407"><code>		<span class="keyword">if</span> <label for="r38" class="ident">i</label> := <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-285" class="ident">LastIndexByte</a>(<label for="r35" class="ident">domain</label>, <span class="lit-number">'.'</span>); <label for="r38" class="ident">i</label> == -<span class="lit-number">1</span> {</code></span>
+<span class="codeline" id="line-408"><code>			<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <label for="r35" class="ident">domain</label>)</code></span>
+<span class="codeline" id="line-409"><code>			<label for="r35" class="ident">domain</label> = <span class="lit-string">""</span></code></span>
+<span class="codeline" id="line-410"><code>		} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-411"><code>			<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <label for="r35" class="ident">domain</label>[<label for="r38" class="ident">i</label>+<span class="lit-number">1</span>:])</code></span>
+<span class="codeline" id="line-412"><code>			<label for="r35" class="ident">domain</label> = <label for="r35" class="ident">domain</label>[:<label for="r38" class="ident">i</label>]</code></span>
+<span class="codeline" id="line-413"><code>			<span class="keyword">if</span> <label for="r38" class="ident">i</label> == <span class="lit-number">0</span> { <span class="comment">// domain == ""</span></code></span>
+<span class="codeline" id="line-414"><code>				<span class="comment">// domain is prefixed with an empty label, append an empty</span></code></span>
+<span class="codeline" id="line-415"><code><span class="comment">				// string to reverseLabels to indicate this.</span></code></span>
+<span class="codeline" id="line-416"><code>				<label for="r36" class="ident">reverseLabels</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r36" class="ident">reverseLabels</label>, <span class="lit-string">""</span>)</code></span>
+<span class="codeline" id="line-417"><code>			}</code></span>
+<span class="codeline" id="line-418"><code>		}</code></span>
+<span class="codeline" id="line-419"><code>	}</code></span>
+<span class="codeline" id="line-420"><code></code></span>
+<span class="codeline" id="line-421"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r36" class="ident">reverseLabels</label>) &gt; <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r36" class="ident">reverseLabels</label>[<span class="lit-number">0</span>]) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-422"><code>		<span class="comment">// An empty label at the end indicates an absolute value.</span></code></span>
+<span class="codeline" id="line-423"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-424"><code>	}</code></span>
+<span class="codeline" id="line-425"><code></code></span>
+<span class="codeline" id="line-426"><code>	<span class="keyword">for</span> <label for="r39" class="ident">_</label>, <label for="r40" class="ident">label</label> := <span class="keyword">range</span> <label for="r36" class="ident">reverseLabels</label> {</code></span>
+<span class="codeline" id="line-427"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r40" class="ident">label</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-428"><code>			<span class="comment">// Empty labels are otherwise invalid.</span></code></span>
+<span class="codeline" id="line-429"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-430"><code>		}</code></span>
+<span class="codeline" id="line-431"><code></code></span>
+<span class="codeline" id="line-432"><code>		<span class="keyword">for</span> <label for="r41" class="ident">_</label>, <label for="r42" class="ident">c</label> := <span class="keyword">range</span> <label for="r40" class="ident">label</label> {</code></span>
+<span class="codeline" id="line-433"><code>			<span class="keyword">if</span> <label for="r42" class="ident">c</label> &lt; <span class="lit-number">33</span> || <label for="r42" class="ident">c</label> &gt; <span class="lit-number">126</span> {</code></span>
+<span class="codeline" id="line-434"><code>				<span class="comment">// Invalid character.</span></code></span>
+<span class="codeline" id="line-435"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-436"><code>			}</code></span>
+<span class="codeline" id="line-437"><code>		}</code></span>
+<span class="codeline" id="line-438"><code>	}</code></span>
+<span class="codeline" id="line-439"><code></code></span>
+<span class="codeline" id="line-440"><code>	<span class="keyword">return</span> <label for="r36" class="ident">reverseLabels</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-441"><code>}</code></span>
+<span class="codeline" id="line-442"><code></code></span>
+<span class="codeline" id="line-443"><code><span class="comment">// isValid performs validity checks on c given that it is a candidate to append</span></code></span>
+<span class="codeline" id="line-444"><code><span class="comment">// to the chain in currentChain.</span></code></span>
+<span class="codeline" id="line-445"><code><span class="keyword">func</span> (<label for="r43" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r44" class="ident"><a href="../../../use/crypto/x509..Certificate.isValid^5339b.html" class="ident">isValid</a></label>(<label for="r45" class="ident">certType</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r46" class="ident">currentChain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r47" class="ident">opts</label> *<a href="#line-194" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
+<span class="codeline" id="line-446"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-744" class="ident">UnhandledCriticalExtensions</a>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-447"><code>		<span class="keyword">return</span> <a href="x509.go.html#line-1052" class="ident">UnhandledCriticalExtension</a>{}</code></span>
+<span class="codeline" id="line-448"><code>	}</code></span>
+<span class="codeline" id="line-449"><code></code></span>
+<span class="codeline" id="line-450"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-451"><code>		<label for="r48" class="ident">child</label> := <label for="r46" class="ident">currentChain</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>)-<span class="lit-number">1</span>]</code></span>
+<span class="codeline" id="line-452"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r48" class="ident">child</label>.<a href="x509.go.html#line-709" class="ident">RawIssuer</a>, <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>) {</code></span>
+<span class="codeline" id="line-453"><code>			<span class="keyword">return</span> <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-46" class="ident">NameMismatch</a>, <span class="lit-string">""</span>}</code></span>
+<span class="codeline" id="line-454"><code>		}</code></span>
+<span class="codeline" id="line-455"><code>	}</code></span>
+<span class="codeline" id="line-456"><code></code></span>
+<span class="codeline" id="line-457"><code>	<label for="r49" class="ident">now</label> := <label for="r47" class="ident">opts</label>.<a href="#line-209" class="ident">CurrentTime</a></code></span>
+<span class="codeline" id="line-458"><code>	<span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-262" class="ident">IsZero</a>() {</code></span>
+<span class="codeline" id="line-459"><code>		<label for="r49" class="ident">now</label> = <a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/time.go.html#line-1347" class="ident">Now</a>()</code></span>
+<span class="codeline" id="line-460"><code>	}</code></span>
+<span class="codeline" id="line-461"><code>	<span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-281" class="ident">Before</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotBefore</a>) {</code></span>
+<span class="codeline" id="line-462"><code>		<span class="keyword">return</span> <a href="#line-68" class="ident">CertificateInvalidError</a>{</code></span>
+<span class="codeline" id="line-463"><code>			<a href="#line-69" class="ident">Cert</a>:   <label for="r43" class="ident">c</label>,</code></span>
+<span class="codeline" id="line-464"><code>			<a href="#line-70" class="ident">Reason</a>: <a href="#line-33" class="ident">Expired</a>,</code></span>
+<span class="codeline" id="line-465"><code>			<a href="#line-71" class="ident">Detail</a>: <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"current time %s is before %s"</span>, <label for="r49" class="ident">now</label>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>), <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotBefore</a>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>)),</code></span>
+<span class="codeline" id="line-466"><code>		}</code></span>
+<span class="codeline" id="line-467"><code>	} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r49" class="ident">now</label>.<a href="../../time/time.go.html#line-271" class="ident">After</a>(<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotAfter</a>) {</code></span>
+<span class="codeline" id="line-468"><code>		<span class="keyword">return</span> <a href="#line-68" class="ident">CertificateInvalidError</a>{</code></span>
+<span class="codeline" id="line-469"><code>			<a href="#line-69" class="ident">Cert</a>:   <label for="r43" class="ident">c</label>,</code></span>
+<span class="codeline" id="line-470"><code>			<a href="#line-70" class="ident">Reason</a>: <a href="#line-33" class="ident">Expired</a>,</code></span>
+<span class="codeline" id="line-471"><code>			<a href="#line-71" class="ident">Detail</a>: <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"current time %s is after %s"</span>, <label for="r49" class="ident">now</label>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>), <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-721" class="ident">NotAfter</a>.<a href="../../time/format.go.html#line-639" class="ident">Format</a>(<a href="../../../pkg/time.html" class="ident i13">time</a>.<a href="../../time/format.go.html#line-119" class="ident">RFC3339</a>)),</code></span>
+<span class="codeline" id="line-472"><code>		}</code></span>
+<span class="codeline" id="line-473"><code>	}</code></span>
+<span class="codeline" id="line-474"><code></code></span>
+<span class="codeline" id="line-475"><code>	<span class="keyword">if</span> <label for="r45" class="ident">certType</label> == <a href="#line-247" class="ident">intermediateCertificate</a> || <label for="r45" class="ident">certType</label> == <a href="#line-248" class="ident">rootCertificate</a> {</code></span>
+<span class="codeline" id="line-476"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-477"><code>			<span class="keyword">return</span> <a href="../../../pkg/errors.html" class="ident i5">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: internal error: empty chain when appending CA cert"</span>)</code></span>
+<span class="codeline" id="line-478"><code>		}</code></span>
+<span class="codeline" id="line-479"><code>	}</code></span>
+<span class="codeline" id="line-480"><code></code></span>
+<span class="codeline" id="line-481"><code>	<span class="comment">// KeyUsage status flags are ignored. From Engineering Security, Peter</span></code></span>
+<span class="codeline" id="line-482"><code><span class="comment">	// Gutmann: A European government CA marked its signing certificates as</span></code></span>
+<span class="codeline" id="line-483"><code><span class="comment">	// being valid for encryption only, but no-one noticed. Another</span></code></span>
+<span class="codeline" id="line-484"><code><span class="comment">	// European CA marked its signature keys as not being valid for</span></code></span>
+<span class="codeline" id="line-485"><code><span class="comment">	// signatures. A different CA marked its own trusted root certificate</span></code></span>
+<span class="codeline" id="line-486"><code><span class="comment">	// as being invalid for certificate signing. Another national CA</span></code></span>
+<span class="codeline" id="line-487"><code><span class="comment">	// distributed a certificate to be used to encrypt data for the</span></code></span>
+<span class="codeline" id="line-488"><code><span class="comment">	// country’s tax authority that was marked as only being usable for</span></code></span>
+<span class="codeline" id="line-489"><code><span class="comment">	// digital signatures but not for encryption. Yet another CA reversed</span></code></span>
+<span class="codeline" id="line-490"><code><span class="comment">	// the order of the bit flags in the keyUsage due to confusion over</span></code></span>
+<span class="codeline" id="line-491"><code><span class="comment">	// encoding endianness, essentially setting a random keyUsage in</span></code></span>
+<span class="codeline" id="line-492"><code><span class="comment">	// certificates that it issued. Another CA created a self-invalidating</span></code></span>
+<span class="codeline" id="line-493"><code><span class="comment">	// certificate by adding a certificate policy statement stipulating</span></code></span>
+<span class="codeline" id="line-494"><code><span class="comment">	// that the certificate had to be used strictly as specified in the</span></code></span>
+<span class="codeline" id="line-495"><code><span class="comment">	// keyUsage, and a keyUsage containing a flag indicating that the RSA</span></code></span>
+<span class="codeline" id="line-496"><code><span class="comment">	// encryption key could only be used for Diffie-Hellman key agreement.</span></code></span>
+<span class="codeline" id="line-497"><code></code></span>
+<span class="codeline" id="line-498"><code>	<span class="keyword">if</span> <label for="r45" class="ident">certType</label> == <a href="#line-247" class="ident">intermediateCertificate</a> &amp;&amp; (!<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-751" class="ident">BasicConstraintsValid</a> || !<label for="r43" class="ident">c</label>.<a href="x509.go.html#line-752" class="ident">IsCA</a>) {</code></span>
+<span class="codeline" id="line-499"><code>		<span class="keyword">return</span> <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-30" class="ident">NotAuthorizedToSign</a>, <span class="lit-string">""</span>}</code></span>
+<span class="codeline" id="line-500"><code>	}</code></span>
+<span class="codeline" id="line-501"><code></code></span>
+<span class="codeline" id="line-502"><code>	<span class="keyword">if</span> <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-751" class="ident">BasicConstraintsValid</a> &amp;&amp; <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-766" class="ident">MaxPathLen</a> &gt;= <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-503"><code>		<label for="r50" class="ident">numIntermediates</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r46" class="ident">currentChain</label>) - <span class="lit-number">1</span></code></span>
+<span class="codeline" id="line-504"><code>		<span class="keyword">if</span> <label for="r50" class="ident">numIntermediates</label> &gt; <label for="r43" class="ident">c</label>.<a href="x509.go.html#line-766" class="ident">MaxPathLen</a> {</code></span>
+<span class="codeline" id="line-505"><code>			<span class="keyword">return</span> <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r43" class="ident">c</label>, <a href="#line-40" class="ident">TooManyIntermediates</a>, <span class="lit-string">""</span>}</code></span>
+<span class="codeline" id="line-506"><code>		}</code></span>
+<span class="codeline" id="line-507"><code>	}</code></span>
+<span class="codeline" id="line-508"><code></code></span>
+<span class="codeline" id="line-509"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-510"><code>}</code></span>
+<span class="codeline" id="line-511"><code></code></span>
+<span class="codeline" id="line-512"><code><span class="comment">// Verify attempts to verify c by building one or more chains from c to a</span></code></span>
+<span class="codeline" id="line-513"><code><span class="comment">// certificate in opts.Roots, using certificates in opts.Intermediates if</span></code></span>
+<span class="codeline" id="line-514"><code><span class="comment">// needed. If successful, it returns one or more chains where the first</span></code></span>
+<span class="codeline" id="line-515"><code><span class="comment">// element of the chain is c and the last element is from opts.Roots.</span></code></span>
+<span class="codeline" id="line-516"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-517"><code><span class="comment">// If opts.Roots is nil, the platform verifier might be used, and</span></code></span>
+<span class="codeline" id="line-518"><code><span class="comment">// verification details might differ from what is described below. If system</span></code></span>
+<span class="codeline" id="line-519"><code><span class="comment">// roots are unavailable the returned error will be of type SystemRootsError.</span></code></span>
+<span class="codeline" id="line-520"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-521"><code><span class="comment">// Name constraints in the intermediates will be applied to all names claimed</span></code></span>
+<span class="codeline" id="line-522"><code><span class="comment">// in the chain, not just opts.DNSName. Thus it is invalid for a leaf to claim</span></code></span>
+<span class="codeline" id="line-523"><code><span class="comment">// example.com if an intermediate doesn't permit it, even if example.com is not</span></code></span>
+<span class="codeline" id="line-524"><code><span class="comment">// the name being validated. Note that DirectoryName constraints are not</span></code></span>
+<span class="codeline" id="line-525"><code><span class="comment">// supported.</span></code></span>
+<span class="codeline" id="line-526"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-527"><code><span class="comment">// Name constraint validation follows the rules from RFC 5280, with the</span></code></span>
+<span class="codeline" id="line-528"><code><span class="comment">// addition that DNS name constraints may use the leading period format</span></code></span>
+<span class="codeline" id="line-529"><code><span class="comment">// defined for emails and URIs. When a constraint has a leading period</span></code></span>
+<span class="codeline" id="line-530"><code><span class="comment">// it indicates that at least one additional label must be prepended to</span></code></span>
+<span class="codeline" id="line-531"><code><span class="comment">// the constrained name to be considered valid.</span></code></span>
+<span class="codeline" id="line-532"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-533"><code><span class="comment">// Extended Key Usage values are enforced nested down a chain, so an intermediate</span></code></span>
+<span class="codeline" id="line-534"><code><span class="comment">// or root that enumerates EKUs prevents a leaf from asserting an EKU not in that</span></code></span>
+<span class="codeline" id="line-535"><code><span class="comment">// list. (While this is not specified, it is common practice in order to limit</span></code></span>
+<span class="codeline" id="line-536"><code><span class="comment">// the types of certificates a CA can issue.)</span></code></span>
+<span class="codeline" id="line-537"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-538"><code><span class="comment">// Certificates that use SHA1WithRSA and ECDSAWithSHA1 signatures are not supported,</span></code></span>
+<span class="codeline" id="line-539"><code><span class="comment">// and will not be used to build chains.</span></code></span>
 <span class="codeline" id="line-540"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-541"><code><span class="comment">// WARNING: this function doesn't do any revocation checking.</span></code></span>
-<span class="codeline" id="line-542"><code><span class="keyword">func</span> (<label for="r51" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r52" class="ident"><a href="../../../use/crypto/x509..Certificate.Verify.html" class="ident">Verify</a></label>(<label for="r53" class="ident">opts</label> <a href="#line-192" class="ident">VerifyOptions</a>) ([][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
-<span class="codeline" id="line-543"><code>	<span class="comment">// Platform-specific verification needs the ASN.1 contents so</span></code></span>
-<span class="codeline" id="line-544"><code><span class="comment">	// this makes the behavior consistent across platforms.</span></code></span>
-<span class="codeline" id="line-545"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r51" class="ident">c</label>.<a href="x509.go.html#line-705" class="ident">Raw</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-546"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-189" class="ident">errNotParsed</a></code></span>
-<span class="codeline" id="line-547"><code>	}</code></span>
-<span class="codeline" id="line-548"><code>	<span class="keyword">for</span> <label for="r54" class="ident">i</label> := <span class="lit-number">0</span>; <label for="r54" class="ident">i</label> &lt; <label for="r53" class="ident">opts</label>.<a href="#line-200" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-73" class="ident">len</a>(); <label for="r54" class="ident">i</label>++ {</code></span>
-<span class="codeline" id="line-549"><code>		<label for="r55" class="ident">c</label>, <label for="r56" class="ident">_</label>, <label for="r57" class="ident">err</label> := <label for="r53" class="ident">opts</label>.<a href="#line-200" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-81" class="ident">cert</a>(<label for="r54" class="ident">i</label>)</code></span>
-<span class="codeline" id="line-550"><code>		<span class="keyword">if</span> <label for="r57" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-551"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"crypto/x509: error fetching intermediate: %w"</span>, <label for="r57" class="ident">err</label>)</code></span>
-<span class="codeline" id="line-552"><code>		}</code></span>
-<span class="codeline" id="line-553"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r55" class="ident">c</label>.<a href="x509.go.html#line-705" class="ident">Raw</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-554"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-189" class="ident">errNotParsed</a></code></span>
-<span class="codeline" id="line-555"><code>		}</code></span>
-<span class="codeline" id="line-556"><code>	}</code></span>
-<span class="codeline" id="line-557"><code></code></span>
-<span class="codeline" id="line-558"><code>	<span class="comment">// Use platform verifiers, where available, if Roots is from SystemCertPool.</span></code></span>
-<span class="codeline" id="line-559"><code>	<span class="keyword">if</span> <a href="../../../pkg/runtime.html" class="ident i8">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"windows"</span> || <a href="../../../pkg/runtime.html" class="ident i8">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"darwin"</span> || <a href="../../../pkg/runtime.html" class="ident i8">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"ios"</span> {</code></span>
-<span class="codeline" id="line-560"><code>		<span class="comment">// Don't use the system verifier if the system pool was replaced with a non-system pool,</span></code></span>
-<span class="codeline" id="line-561"><code><span class="comment">		// i.e. if SetFallbackRoots was called with x509usefallbackroots=1.</span></code></span>
-<span class="codeline" id="line-562"><code>		<label for="r58" class="ident">systemPool</label> := <a href="root.go.html#line-31" class="ident">systemRootsPool</a>()</code></span>
-<span class="codeline" id="line-563"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; (<label for="r58" class="ident">systemPool</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r58" class="ident">systemPool</label>.<a href="cert_pool.go.html#line-35" class="ident">systemPool</a>) {</code></span>
-<span class="codeline" id="line-564"><code>			<span class="keyword">return</span> <label for="r51" class="ident">c</label>.<a href="root_unix.go.html#line-28" class="ident">systemVerify</a>(&amp;<label for="r53" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-565"><code>		}</code></span>
-<span class="codeline" id="line-566"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a>.<a href="cert_pool.go.html#line-35" class="ident">systemPool</a> {</code></span>
-<span class="codeline" id="line-567"><code>			<label for="r59" class="ident">platformChains</label>, <label for="r60" class="ident">err</label> := <label for="r51" class="ident">c</label>.<a href="root_unix.go.html#line-28" class="ident">systemVerify</a>(&amp;<label for="r53" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-568"><code>			<span class="comment">// If the platform verifier succeeded, or there are no additional</span></code></span>
-<span class="codeline" id="line-569"><code><span class="comment">			// roots, return the platform verifier result. Otherwise, continue</span></code></span>
-<span class="codeline" id="line-570"><code><span class="comment">			// with the Go verifier.</span></code></span>
-<span class="codeline" id="line-571"><code>			<span class="keyword">if</span> <label for="r60" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a>.<a href="cert_pool.go.html#line-73" class="ident">len</a>() == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-572"><code>				<span class="keyword">return</span> <label for="r59" class="ident">platformChains</label>, <label for="r60" class="ident">err</label></code></span>
-<span class="codeline" id="line-573"><code>			}</code></span>
-<span class="codeline" id="line-574"><code>		}</code></span>
-<span class="codeline" id="line-575"><code>	}</code></span>
-<span class="codeline" id="line-576"><code></code></span>
-<span class="codeline" id="line-577"><code>	<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-578"><code>		<label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a> = <a href="root.go.html#line-31" class="ident">systemRootsPool</a>()</code></span>
-<span class="codeline" id="line-579"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-580"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-173" class="ident">SystemRootsError</a>{<a href="root.go.html#line-26" class="ident">systemRootsErr</a>}</code></span>
-<span class="codeline" id="line-581"><code>		}</code></span>
-<span class="codeline" id="line-582"><code>	}</code></span>
-<span class="codeline" id="line-583"><code></code></span>
-<span class="codeline" id="line-584"><code>	<label for="r61" class="ident">err</label> := <label for="r51" class="ident">c</label>.<a href="#line-443" class="ident">isValid</a>(<a href="#line-244" class="ident">leafCertificate</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, &amp;<label for="r53" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-585"><code>	<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-586"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
-<span class="codeline" id="line-587"><code>	}</code></span>
-<span class="codeline" id="line-588"><code></code></span>
-<span class="codeline" id="line-589"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r53" class="ident">opts</label>.<a href="#line-195" class="ident">DNSName</a>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-590"><code>		<label for="r61" class="ident">err</label> = <label for="r51" class="ident">c</label>.<a href="#line-936" class="ident">VerifyHostname</a>(<label for="r53" class="ident">opts</label>.<a href="#line-195" class="ident">DNSName</a>)</code></span>
-<span class="codeline" id="line-591"><code>		<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-592"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
-<span class="codeline" id="line-593"><code>		}</code></span>
-<span class="codeline" id="line-594"><code>	}</code></span>
-<span class="codeline" id="line-595"><code></code></span>
-<span class="codeline" id="line-596"><code>	<span class="keyword">var</span> <label for="r62" class="ident">candidateChains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-597"><code>	<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a>.<a href="cert_pool.go.html#line-172" class="ident">contains</a>(<label for="r51" class="ident">c</label>) {</code></span>
-<span class="codeline" id="line-598"><code>		<label for="r62" class="ident">candidateChains</label> = [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>{{<label for="r51" class="ident">c</label>}}</code></span>
-<span class="codeline" id="line-599"><code>	} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-600"><code>		<label for="r62" class="ident">candidateChains</label>, <label for="r61" class="ident">err</label> = <label for="r51" class="ident">c</label>.<a href="#line-725" class="ident">buildChains</a>([]*<a href="x509.go.html#line-704" class="ident">Certificate</a>{<label for="r51" class="ident">c</label>}, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, &amp;<label for="r53" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-601"><code>		<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-602"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
-<span class="codeline" id="line-603"><code>		}</code></span>
-<span class="codeline" id="line-604"><code>	}</code></span>
-<span class="codeline" id="line-605"><code></code></span>
-<span class="codeline" id="line-606"><code>	<label for="r63" class="ident">anyKeyUsage</label> := <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-607"><code>	<span class="keyword">for</span> <label for="r64" class="ident">_</label>, <label for="r65" class="ident">eku</label> := <span class="keyword">range</span> <label for="r53" class="ident">opts</label>.<a href="#line-212" class="ident">KeyUsages</a> {</code></span>
-<span class="codeline" id="line-608"><code>		<span class="keyword">if</span> <label for="r65" class="ident">eku</label> == <a href="x509.go.html#line-635" class="ident">ExtKeyUsageAny</a> {</code></span>
-<span class="codeline" id="line-609"><code>			<span class="comment">// The presence of anyExtendedKeyUsage overrides any other key usage.</span></code></span>
-<span class="codeline" id="line-610"><code>			<label for="r63" class="ident">anyKeyUsage</label> = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-611"><code>			<span class="keyword">break</span></code></span>
-<span class="codeline" id="line-612"><code>		}</code></span>
-<span class="codeline" id="line-613"><code>	}</code></span>
-<span class="codeline" id="line-614"><code></code></span>
-<span class="codeline" id="line-615"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r53" class="ident">opts</label>.<a href="#line-212" class="ident">KeyUsages</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-616"><code>		<label for="r53" class="ident">opts</label>.<a href="#line-212" class="ident">KeyUsages</a> = []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="x509.go.html#line-636" class="ident">ExtKeyUsageServerAuth</a>}</code></span>
-<span class="codeline" id="line-617"><code>	}</code></span>
-<span class="codeline" id="line-618"><code></code></span>
-<span class="codeline" id="line-619"><code>	<span class="keyword">var</span> <label for="r66" class="ident">invalidPoliciesChains</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-620"><code>	<span class="keyword">var</span> <label for="r67" class="ident">incompatibleKeyUsageChains</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-621"><code>	<span class="keyword">var</span> <label for="r68" class="ident">constraintsHintErr</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
-<span class="codeline" id="line-622"><code>	<label for="r62" class="ident">candidateChains</label> = <a href="../../../pkg/slices.html" class="ident i9">slices</a>.<a href="../../slices/slices.go.html#line-239" class="ident">DeleteFunc</a>(<label for="r62" class="ident">candidateChains</label>, <span class="keyword">func</span>(<label for="r69" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-623"><code>		<span class="keyword">if</span> !<a href="#line-1180" class="ident">policiesValid</a>(<label for="r69" class="ident">chain</label>, <label for="r53" class="ident">opts</label>) {</code></span>
-<span class="codeline" id="line-624"><code>			<label for="r66" class="ident">invalidPoliciesChains</label>++</code></span>
-<span class="codeline" id="line-625"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-626"><code>		}</code></span>
-<span class="codeline" id="line-627"><code>		<span class="comment">// If any key usage is acceptable, no need to check the chain for</span></code></span>
-<span class="codeline" id="line-628"><code><span class="comment">		// key usages.</span></code></span>
-<span class="codeline" id="line-629"><code>		<span class="keyword">if</span> !<label for="r63" class="ident">anyKeyUsage</label> &amp;&amp; !<a href="#line-981" class="ident">checkChainForKeyUsage</a>(<label for="r69" class="ident">chain</label>, <label for="r53" class="ident">opts</label>.<a href="#line-212" class="ident">KeyUsages</a>) {</code></span>
-<span class="codeline" id="line-630"><code>			<label for="r67" class="ident">incompatibleKeyUsageChains</label>++</code></span>
-<span class="codeline" id="line-631"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-632"><code>		}</code></span>
-<span class="codeline" id="line-633"><code>		<span class="keyword">if</span> <label for="r70" class="ident">err</label> := <a href="constraints.go.html#line-510" class="ident">checkChainConstraints</a>(<label for="r69" class="ident">chain</label>); <label for="r70" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-634"><code>			<span class="keyword">if</span> <label for="r68" class="ident">constraintsHintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-635"><code>				<label for="r68" class="ident">constraintsHintErr</label> = <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-35" class="ident">CANotAuthorizedForThisName</a>, <label for="r70" class="ident">err</label>.Error()}</code></span>
-<span class="codeline" id="line-636"><code>			}</code></span>
-<span class="codeline" id="line-637"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-638"><code>		}</code></span>
-<span class="codeline" id="line-639"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-640"><code>	})</code></span>
-<span class="codeline" id="line-641"><code></code></span>
-<span class="codeline" id="line-642"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r62" class="ident">candidateChains</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-643"><code>		<span class="keyword">if</span> <label for="r68" class="ident">constraintsHintErr</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-644"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r68" class="ident">constraintsHintErr</label> <span class="comment">// Preserve previous constraint behavior</span></code></span>
-<span class="codeline" id="line-645"><code>		}</code></span>
-<span class="codeline" id="line-646"><code>		<span class="keyword">var</span> <label for="r71" class="ident">details</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
-<span class="codeline" id="line-647"><code>		<span class="keyword">if</span> <label for="r67" class="ident">incompatibleKeyUsageChains</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-648"><code>			<span class="keyword">if</span> <label for="r66" class="ident">invalidPoliciesChains</label> == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-649"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-41" class="ident">IncompatibleUsage</a>, <span class="lit-string">""</span>}</code></span>
-<span class="codeline" id="line-650"><code>			}</code></span>
-<span class="codeline" id="line-651"><code>			<label for="r71" class="ident">details</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r71" class="ident">details</label>, <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%d candidate chains with incompatible key usage"</span>, <label for="r67" class="ident">incompatibleKeyUsageChains</label>))</code></span>
-<span class="codeline" id="line-652"><code>		}</code></span>
-<span class="codeline" id="line-653"><code>		<span class="keyword">if</span> <label for="r66" class="ident">invalidPoliciesChains</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-654"><code>			<label for="r71" class="ident">details</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r71" class="ident">details</label>, <a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%d candidate chains with invalid policies"</span>, <label for="r66" class="ident">invalidPoliciesChains</label>))</code></span>
-<span class="codeline" id="line-655"><code>		}</code></span>
-<span class="codeline" id="line-656"><code>		<label for="r61" class="ident">err</label> = <a href="#line-66" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-61" class="ident">NoValidChains</a>, <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-487" class="ident">Join</a>(<label for="r71" class="ident">details</label>, <span class="lit-string">", "</span>)}</code></span>
-<span class="codeline" id="line-657"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
-<span class="codeline" id="line-658"><code>	}</code></span>
-<span class="codeline" id="line-659"><code></code></span>
-<span class="codeline" id="line-660"><code>	<span class="keyword">return</span> <label for="r62" class="ident">candidateChains</label>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-661"><code>}</code></span>
-<span class="codeline" id="line-662"><code></code></span>
-<span class="codeline" id="line-663"><code><span class="keyword">func</span> <label for="r72" class="ident"><a href="../../../pkg/crypto/x509.html#name-appendToFreshChain" class="ident">appendToFreshChain</a></label>(<label for="r73" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r74" class="ident">cert</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) []*<a href="x509.go.html#line-704" class="ident">Certificate</a> {</code></span>
-<span class="codeline" id="line-664"><code>	<label for="r75" class="ident">n</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r73" class="ident">chain</label>)+<span class="lit-number">1</span>)</code></span>
-<span class="codeline" id="line-665"><code>	<a href="../../../pkg/builtin.html#name-copy" class="ident">copy</a>(<label for="r75" class="ident">n</label>, <label for="r73" class="ident">chain</label>)</code></span>
-<span class="codeline" id="line-666"><code>	<label for="r75" class="ident">n</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r73" class="ident">chain</label>)] = <label for="r74" class="ident">cert</label></code></span>
-<span class="codeline" id="line-667"><code>	<span class="keyword">return</span> <label for="r75" class="ident">n</label></code></span>
-<span class="codeline" id="line-668"><code>}</code></span>
-<span class="codeline" id="line-669"><code></code></span>
-<span class="codeline" id="line-670"><code><span class="comment">// alreadyInChain checks whether a candidate certificate is present in a chain.</span></code></span>
-<span class="codeline" id="line-671"><code><span class="comment">// Rather than doing a direct byte for byte equivalency check, we check if the</span></code></span>
-<span class="codeline" id="line-672"><code><span class="comment">// subject, public key, and SAN, if present, are equal. This prevents loops that</span></code></span>
-<span class="codeline" id="line-673"><code><span class="comment">// are created by mutual cross-signatures, or other cross-signature bridge</span></code></span>
-<span class="codeline" id="line-674"><code><span class="comment">// oddities.</span></code></span>
-<span class="codeline" id="line-675"><code><span class="keyword">func</span> <label for="r76" class="ident"><a href="../../../pkg/crypto/x509.html#name-alreadyInChain" class="ident">alreadyInChain</a></label>(<label for="r77" class="ident">candidate</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r78" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-676"><code>	<span class="keyword">type</span> <label for="r79" class="ident">pubKeyEqual</label> <span class="keyword">interface</span> {</code></span>
-<span class="codeline" id="line-677"><code>		<label for="r80" class="ident">Equal</label>(<a href="../../../pkg/crypto.html" class="ident i1">crypto</a>.<a href="../crypto.go.html#line-162" class="ident">PublicKey</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-678"><code>	}</code></span>
-<span class="codeline" id="line-679"><code></code></span>
-<span class="codeline" id="line-680"><code>	<span class="keyword">var</span> <label for="r81" class="ident">candidateSAN</label> *<a href="../../../pkg/crypto/x509/pkix.html" class="ident i2">pkix</a>.<a href="pkix/pkix.go.html#line-113" class="ident">Extension</a></code></span>
-<span class="codeline" id="line-681"><code>	<span class="keyword">for</span> <label for="r82" class="ident">_</label>, <label for="r83" class="ident">ext</label> := <span class="keyword">range</span> <label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-728" class="ident">Extensions</a> {</code></span>
-<span class="codeline" id="line-682"><code>		<span class="keyword">if</span> <label for="r83" class="ident">ext</label>.<a href="pkix/pkix.go.html#line-114" class="ident">Id</a>.<a href="../../encoding/asn1/asn1.go.html#line-229" class="ident">Equal</a>(<a href="x509.go.html#line-1127" class="ident">oidExtensionSubjectAltName</a>) {</code></span>
-<span class="codeline" id="line-683"><code>			<label for="r81" class="ident">candidateSAN</label> = &amp;<label for="r83" class="ident">ext</label></code></span>
-<span class="codeline" id="line-684"><code>			<span class="keyword">break</span></code></span>
-<span class="codeline" id="line-685"><code>		}</code></span>
-<span class="codeline" id="line-686"><code>	}</code></span>
-<span class="codeline" id="line-687"><code></code></span>
-<span class="codeline" id="line-688"><code>	<span class="keyword">for</span> <label for="r84" class="ident">_</label>, <label for="r85" class="ident">cert</label> := <span class="keyword">range</span> <label for="r78" class="ident">chain</label> {</code></span>
-<span class="codeline" id="line-689"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>, <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>) {</code></span>
-<span class="codeline" id="line-690"><code>			<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-691"><code>		}</code></span>
-<span class="codeline" id="line-692"><code>		<span class="comment">// We enforce the canonical encoding of SPKI (by only allowing the</span></code></span>
-<span class="codeline" id="line-693"><code><span class="comment">		// correct AI paremeter encodings in parseCertificate), so it's safe to</span></code></span>
-<span class="codeline" id="line-694"><code><span class="comment">		// directly compare the raw bytes.</span></code></span>
-<span class="codeline" id="line-695"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-707" class="ident">RawSubjectPublicKeyInfo</a>, <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-707" class="ident">RawSubjectPublicKeyInfo</a>) {</code></span>
-<span class="codeline" id="line-696"><code>			<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-697"><code>		}</code></span>
-<span class="codeline" id="line-698"><code>		<span class="keyword">var</span> <label for="r86" class="ident">certSAN</label> *<a href="../../../pkg/crypto/x509/pkix.html" class="ident i2">pkix</a>.<a href="pkix/pkix.go.html#line-113" class="ident">Extension</a></code></span>
-<span class="codeline" id="line-699"><code>		<span class="keyword">for</span> <label for="r87" class="ident">_</label>, <label for="r88" class="ident">ext</label> := <span class="keyword">range</span> <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-728" class="ident">Extensions</a> {</code></span>
-<span class="codeline" id="line-700"><code>			<span class="keyword">if</span> <label for="r88" class="ident">ext</label>.<a href="pkix/pkix.go.html#line-114" class="ident">Id</a>.<a href="../../encoding/asn1/asn1.go.html#line-229" class="ident">Equal</a>(<a href="x509.go.html#line-1127" class="ident">oidExtensionSubjectAltName</a>) {</code></span>
-<span class="codeline" id="line-701"><code>				<label for="r86" class="ident">certSAN</label> = &amp;<label for="r88" class="ident">ext</label></code></span>
-<span class="codeline" id="line-702"><code>				<span class="keyword">break</span></code></span>
-<span class="codeline" id="line-703"><code>			}</code></span>
-<span class="codeline" id="line-704"><code>		}</code></span>
-<span class="codeline" id="line-705"><code>		<span class="keyword">if</span> <label for="r81" class="ident">candidateSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; <label for="r86" class="ident">certSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-706"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-707"><code>		} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r81" class="ident">candidateSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r86" class="ident">certSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-708"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-541"><code><span class="comment">// Certificates other than c in the returned chains should not be modified.</span></code></span>
+<span class="codeline" id="line-542"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-543"><code><span class="comment">// WARNING: this function doesn't do any revocation checking.</span></code></span>
+<span class="codeline" id="line-544"><code><span class="keyword">func</span> (<label for="r51" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r52" class="ident"><a href="../../../use/crypto/x509..Certificate.Verify.html" class="ident">Verify</a></label>(<label for="r53" class="ident">opts</label> <a href="#line-194" class="ident">VerifyOptions</a>) ([][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
+<span class="codeline" id="line-545"><code>	<span class="comment">// Platform-specific verification needs the ASN.1 contents so</span></code></span>
+<span class="codeline" id="line-546"><code><span class="comment">	// this makes the behavior consistent across platforms.</span></code></span>
+<span class="codeline" id="line-547"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r51" class="ident">c</label>.<a href="x509.go.html#line-705" class="ident">Raw</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-548"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-191" class="ident">errNotParsed</a></code></span>
+<span class="codeline" id="line-549"><code>	}</code></span>
+<span class="codeline" id="line-550"><code>	<span class="keyword">for</span> <label for="r54" class="ident">i</label> := <span class="lit-number">0</span>; <label for="r54" class="ident">i</label> &lt; <label for="r53" class="ident">opts</label>.<a href="#line-202" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-73" class="ident">len</a>(); <label for="r54" class="ident">i</label>++ {</code></span>
+<span class="codeline" id="line-551"><code>		<label for="r55" class="ident">c</label>, <label for="r56" class="ident">_</label>, <label for="r57" class="ident">err</label> := <label for="r53" class="ident">opts</label>.<a href="#line-202" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-81" class="ident">cert</a>(<label for="r54" class="ident">i</label>)</code></span>
+<span class="codeline" id="line-552"><code>		<span class="keyword">if</span> <label for="r57" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-553"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"crypto/x509: error fetching intermediate: %w"</span>, <label for="r57" class="ident">err</label>)</code></span>
+<span class="codeline" id="line-554"><code>		}</code></span>
+<span class="codeline" id="line-555"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r55" class="ident">c</label>.<a href="x509.go.html#line-705" class="ident">Raw</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-556"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-191" class="ident">errNotParsed</a></code></span>
+<span class="codeline" id="line-557"><code>		}</code></span>
+<span class="codeline" id="line-558"><code>	}</code></span>
+<span class="codeline" id="line-559"><code></code></span>
+<span class="codeline" id="line-560"><code>	<span class="comment">// Use platform verifiers, where available, if Roots is from SystemCertPool.</span></code></span>
+<span class="codeline" id="line-561"><code>	<span class="keyword">if</span> <a href="../../../pkg/runtime.html" class="ident i10">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"windows"</span> || <a href="../../../pkg/runtime.html" class="ident i10">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"darwin"</span> || <a href="../../../pkg/runtime.html" class="ident i10">runtime</a>.<a href="../../runtime/extern.go.html#line-380" class="ident">GOOS</a> == <span class="lit-string">"ios"</span> {</code></span>
+<span class="codeline" id="line-562"><code>		<span class="comment">// Don't use the system verifier if the system pool was replaced with a non-system pool,</span></code></span>
+<span class="codeline" id="line-563"><code><span class="comment">		// i.e. if SetFallbackRoots was called with x509usefallbackroots=1.</span></code></span>
+<span class="codeline" id="line-564"><code>		<label for="r58" class="ident">systemPool</label> := <a href="root.go.html#line-31" class="ident">systemRootsPool</a>()</code></span>
+<span class="codeline" id="line-565"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; (<label for="r58" class="ident">systemPool</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r58" class="ident">systemPool</label>.<a href="cert_pool.go.html#line-35" class="ident">systemPool</a>) {</code></span>
+<span class="codeline" id="line-566"><code>			<span class="keyword">return</span> <label for="r51" class="ident">c</label>.<a href="root_unix.go.html#line-28" class="ident">systemVerify</a>(&amp;<label for="r53" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-567"><code>		}</code></span>
+<span class="codeline" id="line-568"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a>.<a href="cert_pool.go.html#line-35" class="ident">systemPool</a> {</code></span>
+<span class="codeline" id="line-569"><code>			<label for="r59" class="ident">platformChains</label>, <label for="r60" class="ident">err</label> := <label for="r51" class="ident">c</label>.<a href="root_unix.go.html#line-28" class="ident">systemVerify</a>(&amp;<label for="r53" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-570"><code>			<span class="comment">// If the platform verifier succeeded, or there are no additional</span></code></span>
+<span class="codeline" id="line-571"><code><span class="comment">			// roots, return the platform verifier result. Otherwise, continue</span></code></span>
+<span class="codeline" id="line-572"><code><span class="comment">			// with the Go verifier.</span></code></span>
+<span class="codeline" id="line-573"><code>			<span class="keyword">if</span> <label for="r60" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a>.<a href="cert_pool.go.html#line-73" class="ident">len</a>() == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-574"><code>				<span class="keyword">return</span> <label for="r59" class="ident">platformChains</label>, <label for="r60" class="ident">err</label></code></span>
+<span class="codeline" id="line-575"><code>			}</code></span>
+<span class="codeline" id="line-576"><code>		}</code></span>
+<span class="codeline" id="line-577"><code>	}</code></span>
+<span class="codeline" id="line-578"><code></code></span>
+<span class="codeline" id="line-579"><code>	<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-580"><code>		<label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a> = <a href="root.go.html#line-31" class="ident">systemRootsPool</a>()</code></span>
+<span class="codeline" id="line-581"><code>		<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-582"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-175" class="ident">SystemRootsError</a>{<a href="root.go.html#line-26" class="ident">systemRootsErr</a>}</code></span>
+<span class="codeline" id="line-583"><code>		}</code></span>
+<span class="codeline" id="line-584"><code>	}</code></span>
+<span class="codeline" id="line-585"><code></code></span>
+<span class="codeline" id="line-586"><code>	<label for="r61" class="ident">err</label> := <label for="r51" class="ident">c</label>.<a href="#line-445" class="ident">isValid</a>(<a href="#line-246" class="ident">leafCertificate</a>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, &amp;<label for="r53" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-587"><code>	<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-588"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
+<span class="codeline" id="line-589"><code>	}</code></span>
+<span class="codeline" id="line-590"><code></code></span>
+<span class="codeline" id="line-591"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r53" class="ident">opts</label>.<a href="#line-197" class="ident">DNSName</a>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-592"><code>		<label for="r61" class="ident">err</label> = <label for="r51" class="ident">c</label>.<a href="#line-941" class="ident">VerifyHostname</a>(<label for="r53" class="ident">opts</label>.<a href="#line-197" class="ident">DNSName</a>)</code></span>
+<span class="codeline" id="line-593"><code>		<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-594"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
+<span class="codeline" id="line-595"><code>		}</code></span>
+<span class="codeline" id="line-596"><code>	}</code></span>
+<span class="codeline" id="line-597"><code></code></span>
+<span class="codeline" id="line-598"><code>	<span class="keyword">var</span> <label for="r62" class="ident">candidateChains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-599"><code>	<span class="keyword">if</span> <label for="r53" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a>.<a href="cert_pool.go.html#line-172" class="ident">contains</a>(<label for="r51" class="ident">c</label>) {</code></span>
+<span class="codeline" id="line-600"><code>		<label for="r62" class="ident">candidateChains</label> = [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>{{<label for="r51" class="ident">c</label>}}</code></span>
+<span class="codeline" id="line-601"><code>	} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-602"><code>		<label for="r62" class="ident">candidateChains</label>, <label for="r61" class="ident">err</label> = <label for="r51" class="ident">c</label>.<a href="#line-730" class="ident">buildChains</a>([]*<a href="x509.go.html#line-704" class="ident">Certificate</a>{<label for="r51" class="ident">c</label>}, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, &amp;<label for="r53" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-603"><code>		<span class="keyword">if</span> <label for="r61" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-604"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
+<span class="codeline" id="line-605"><code>		}</code></span>
+<span class="codeline" id="line-606"><code>	}</code></span>
+<span class="codeline" id="line-607"><code></code></span>
+<span class="codeline" id="line-608"><code>	<label for="r63" class="ident">anyKeyUsage</label> := <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-609"><code>	<span class="keyword">for</span> <label for="r64" class="ident">_</label>, <label for="r65" class="ident">eku</label> := <span class="keyword">range</span> <label for="r53" class="ident">opts</label>.<a href="#line-214" class="ident">KeyUsages</a> {</code></span>
+<span class="codeline" id="line-610"><code>		<span class="keyword">if</span> <label for="r65" class="ident">eku</label> == <a href="x509.go.html#line-635" class="ident">ExtKeyUsageAny</a> {</code></span>
+<span class="codeline" id="line-611"><code>			<span class="comment">// The presence of anyExtendedKeyUsage overrides any other key usage.</span></code></span>
+<span class="codeline" id="line-612"><code>			<label for="r63" class="ident">anyKeyUsage</label> = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-613"><code>			<span class="keyword">break</span></code></span>
+<span class="codeline" id="line-614"><code>		}</code></span>
+<span class="codeline" id="line-615"><code>	}</code></span>
+<span class="codeline" id="line-616"><code></code></span>
+<span class="codeline" id="line-617"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r53" class="ident">opts</label>.<a href="#line-214" class="ident">KeyUsages</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-618"><code>		<label for="r53" class="ident">opts</label>.<a href="#line-214" class="ident">KeyUsages</a> = []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="x509.go.html#line-636" class="ident">ExtKeyUsageServerAuth</a>}</code></span>
+<span class="codeline" id="line-619"><code>	}</code></span>
+<span class="codeline" id="line-620"><code></code></span>
+<span class="codeline" id="line-621"><code>	<span class="keyword">var</span> <label for="r66" class="ident">invalidPoliciesChains</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-622"><code>	<span class="keyword">var</span> <label for="r67" class="ident">incompatibleKeyUsageChains</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-623"><code>	<span class="keyword">var</span> <label for="r68" class="ident">constraintsHintErr</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
+<span class="codeline" id="line-624"><code>	<label for="r62" class="ident">candidateChains</label> = <a href="../../../pkg/slices.html" class="ident i11">slices</a>.<a href="../../slices/slices.go.html#line-239" class="ident">DeleteFunc</a>(<label for="r62" class="ident">candidateChains</label>, <span class="keyword">func</span>(<label for="r69" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-625"><code>		<span class="keyword">if</span> !<a href="#line-1185" class="ident">policiesValid</a>(<label for="r69" class="ident">chain</label>, <label for="r53" class="ident">opts</label>) {</code></span>
+<span class="codeline" id="line-626"><code>			<label for="r66" class="ident">invalidPoliciesChains</label>++</code></span>
+<span class="codeline" id="line-627"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-628"><code>		}</code></span>
+<span class="codeline" id="line-629"><code>		<span class="comment">// If any key usage is acceptable, no need to check the chain for</span></code></span>
+<span class="codeline" id="line-630"><code><span class="comment">		// key usages.</span></code></span>
+<span class="codeline" id="line-631"><code>		<span class="keyword">if</span> !<label for="r63" class="ident">anyKeyUsage</label> &amp;&amp; !<a href="#line-986" class="ident">checkChainForKeyUsage</a>(<label for="r69" class="ident">chain</label>, <label for="r53" class="ident">opts</label>.<a href="#line-214" class="ident">KeyUsages</a>) {</code></span>
+<span class="codeline" id="line-632"><code>			<label for="r67" class="ident">incompatibleKeyUsageChains</label>++</code></span>
+<span class="codeline" id="line-633"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-634"><code>		}</code></span>
+<span class="codeline" id="line-635"><code>		<span class="keyword">if</span> <label for="r70" class="ident">err</label> := <a href="constraints.go.html#line-510" class="ident">checkChainConstraints</a>(<label for="r69" class="ident">chain</label>); <label for="r70" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-636"><code>			<span class="keyword">if</span> <label for="r68" class="ident">constraintsHintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-637"><code>				<label for="r68" class="ident">constraintsHintErr</label> = <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-37" class="ident">CANotAuthorizedForThisName</a>, <label for="r70" class="ident">err</label>.Error()}</code></span>
+<span class="codeline" id="line-638"><code>			}</code></span>
+<span class="codeline" id="line-639"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-640"><code>		}</code></span>
+<span class="codeline" id="line-641"><code>		<span class="keyword">if</span> <a href="#line-1422" class="ident">containsDistrustedSPKIHash</a>(<label for="r69" class="ident">chain</label>) {</code></span>
+<span class="codeline" id="line-642"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-643"><code>		}</code></span>
+<span class="codeline" id="line-644"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-645"><code>	})</code></span>
+<span class="codeline" id="line-646"><code></code></span>
+<span class="codeline" id="line-647"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r62" class="ident">candidateChains</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-648"><code>		<span class="keyword">if</span> <label for="r68" class="ident">constraintsHintErr</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-649"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r68" class="ident">constraintsHintErr</label> <span class="comment">// Preserve previous constraint behavior</span></code></span>
+<span class="codeline" id="line-650"><code>		}</code></span>
+<span class="codeline" id="line-651"><code>		<span class="keyword">var</span> <label for="r71" class="ident">details</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a></code></span>
+<span class="codeline" id="line-652"><code>		<span class="keyword">if</span> <label for="r67" class="ident">incompatibleKeyUsageChains</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-653"><code>			<span class="keyword">if</span> <label for="r66" class="ident">invalidPoliciesChains</label> == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-654"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-43" class="ident">IncompatibleUsage</a>, <span class="lit-string">""</span>}</code></span>
+<span class="codeline" id="line-655"><code>			}</code></span>
+<span class="codeline" id="line-656"><code>			<label for="r71" class="ident">details</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r71" class="ident">details</label>, <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%d candidate chains with incompatible key usage"</span>, <label for="r67" class="ident">incompatibleKeyUsageChains</label>))</code></span>
+<span class="codeline" id="line-657"><code>		}</code></span>
+<span class="codeline" id="line-658"><code>		<span class="keyword">if</span> <label for="r66" class="ident">invalidPoliciesChains</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-659"><code>			<label for="r71" class="ident">details</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r71" class="ident">details</label>, <a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"%d candidate chains with invalid policies"</span>, <label for="r66" class="ident">invalidPoliciesChains</label>))</code></span>
+<span class="codeline" id="line-660"><code>		}</code></span>
+<span class="codeline" id="line-661"><code>		<label for="r61" class="ident">err</label> = <a href="#line-68" class="ident">CertificateInvalidError</a>{<label for="r51" class="ident">c</label>, <a href="#line-63" class="ident">NoValidChains</a>, <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-487" class="ident">Join</a>(<label for="r71" class="ident">details</label>, <span class="lit-string">", "</span>)}</code></span>
+<span class="codeline" id="line-662"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <label for="r61" class="ident">err</label></code></span>
+<span class="codeline" id="line-663"><code>	}</code></span>
+<span class="codeline" id="line-664"><code></code></span>
+<span class="codeline" id="line-665"><code>	<span class="keyword">return</span> <label for="r62" class="ident">candidateChains</label>, <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-666"><code>}</code></span>
+<span class="codeline" id="line-667"><code></code></span>
+<span class="codeline" id="line-668"><code><span class="keyword">func</span> <label for="r72" class="ident"><a href="../../../pkg/crypto/x509.html#name-appendToFreshChain" class="ident">appendToFreshChain</a></label>(<label for="r73" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r74" class="ident">cert</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) []*<a href="x509.go.html#line-704" class="ident">Certificate</a> {</code></span>
+<span class="codeline" id="line-669"><code>	<label for="r75" class="ident">n</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r73" class="ident">chain</label>)+<span class="lit-number">1</span>)</code></span>
+<span class="codeline" id="line-670"><code>	<a href="../../../pkg/builtin.html#name-copy" class="ident">copy</a>(<label for="r75" class="ident">n</label>, <label for="r73" class="ident">chain</label>)</code></span>
+<span class="codeline" id="line-671"><code>	<label for="r75" class="ident">n</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r73" class="ident">chain</label>)] = <label for="r74" class="ident">cert</label></code></span>
+<span class="codeline" id="line-672"><code>	<span class="keyword">return</span> <label for="r75" class="ident">n</label></code></span>
+<span class="codeline" id="line-673"><code>}</code></span>
+<span class="codeline" id="line-674"><code></code></span>
+<span class="codeline" id="line-675"><code><span class="comment">// alreadyInChain checks whether a candidate certificate is present in a chain.</span></code></span>
+<span class="codeline" id="line-676"><code><span class="comment">// Rather than doing a direct byte for byte equivalency check, we check if the</span></code></span>
+<span class="codeline" id="line-677"><code><span class="comment">// subject, public key, and SAN, if present, are equal. This prevents loops that</span></code></span>
+<span class="codeline" id="line-678"><code><span class="comment">// are created by mutual cross-signatures, or other cross-signature bridge</span></code></span>
+<span class="codeline" id="line-679"><code><span class="comment">// oddities.</span></code></span>
+<span class="codeline" id="line-680"><code><span class="keyword">func</span> <label for="r76" class="ident"><a href="../../../pkg/crypto/x509.html#name-alreadyInChain" class="ident">alreadyInChain</a></label>(<label for="r77" class="ident">candidate</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r78" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-681"><code>	<span class="keyword">type</span> <label for="r79" class="ident">pubKeyEqual</label> <span class="keyword">interface</span> {</code></span>
+<span class="codeline" id="line-682"><code>		<label for="r80" class="ident">Equal</label>(<a href="../../../pkg/crypto.html" class="ident i1">crypto</a>.<a href="../crypto.go.html#line-162" class="ident">PublicKey</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-683"><code>	}</code></span>
+<span class="codeline" id="line-684"><code></code></span>
+<span class="codeline" id="line-685"><code>	<span class="keyword">var</span> <label for="r81" class="ident">candidateSAN</label> *<a href="../../../pkg/crypto/x509/pkix.html" class="ident i3">pkix</a>.<a href="pkix/pkix.go.html#line-113" class="ident">Extension</a></code></span>
+<span class="codeline" id="line-686"><code>	<span class="keyword">for</span> <label for="r82" class="ident">_</label>, <label for="r83" class="ident">ext</label> := <span class="keyword">range</span> <label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-728" class="ident">Extensions</a> {</code></span>
+<span class="codeline" id="line-687"><code>		<span class="keyword">if</span> <label for="r83" class="ident">ext</label>.<a href="pkix/pkix.go.html#line-114" class="ident">Id</a>.<a href="../../encoding/asn1/asn1.go.html#line-229" class="ident">Equal</a>(<a href="x509.go.html#line-1127" class="ident">oidExtensionSubjectAltName</a>) {</code></span>
+<span class="codeline" id="line-688"><code>			<label for="r81" class="ident">candidateSAN</label> = &amp;<label for="r83" class="ident">ext</label></code></span>
+<span class="codeline" id="line-689"><code>			<span class="keyword">break</span></code></span>
+<span class="codeline" id="line-690"><code>		}</code></span>
+<span class="codeline" id="line-691"><code>	}</code></span>
+<span class="codeline" id="line-692"><code></code></span>
+<span class="codeline" id="line-693"><code>	<span class="keyword">for</span> <label for="r84" class="ident">_</label>, <label for="r85" class="ident">cert</label> := <span class="keyword">range</span> <label for="r78" class="ident">chain</label> {</code></span>
+<span class="codeline" id="line-694"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>, <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>) {</code></span>
+<span class="codeline" id="line-695"><code>			<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-696"><code>		}</code></span>
+<span class="codeline" id="line-697"><code>		<span class="comment">// We enforce the canonical encoding of SPKI (by only allowing the</span></code></span>
+<span class="codeline" id="line-698"><code><span class="comment">		// correct AI paremeter encodings in parseCertificate), so it's safe to</span></code></span>
+<span class="codeline" id="line-699"><code><span class="comment">		// directly compare the raw bytes.</span></code></span>
+<span class="codeline" id="line-700"><code>		<span class="keyword">if</span> !<a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r77" class="ident">candidate</label>.<a href="x509.go.html#line-707" class="ident">RawSubjectPublicKeyInfo</a>, <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-707" class="ident">RawSubjectPublicKeyInfo</a>) {</code></span>
+<span class="codeline" id="line-701"><code>			<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-702"><code>		}</code></span>
+<span class="codeline" id="line-703"><code>		<span class="keyword">var</span> <label for="r86" class="ident">certSAN</label> *<a href="../../../pkg/crypto/x509/pkix.html" class="ident i3">pkix</a>.<a href="pkix/pkix.go.html#line-113" class="ident">Extension</a></code></span>
+<span class="codeline" id="line-704"><code>		<span class="keyword">for</span> <label for="r87" class="ident">_</label>, <label for="r88" class="ident">ext</label> := <span class="keyword">range</span> <label for="r85" class="ident">cert</label>.<a href="x509.go.html#line-728" class="ident">Extensions</a> {</code></span>
+<span class="codeline" id="line-705"><code>			<span class="keyword">if</span> <label for="r88" class="ident">ext</label>.<a href="pkix/pkix.go.html#line-114" class="ident">Id</a>.<a href="../../encoding/asn1/asn1.go.html#line-229" class="ident">Equal</a>(<a href="x509.go.html#line-1127" class="ident">oidExtensionSubjectAltName</a>) {</code></span>
+<span class="codeline" id="line-706"><code>				<label for="r86" class="ident">certSAN</label> = &amp;<label for="r88" class="ident">ext</label></code></span>
+<span class="codeline" id="line-707"><code>				<span class="keyword">break</span></code></span>
+<span class="codeline" id="line-708"><code>			}</code></span>
 <span class="codeline" id="line-709"><code>		}</code></span>
-<span class="codeline" id="line-710"><code>		<span class="keyword">if</span> <a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r81" class="ident">candidateSAN</label>.<a href="pkix/pkix.go.html#line-116" class="ident">Value</a>, <label for="r86" class="ident">certSAN</label>.<a href="pkix/pkix.go.html#line-116" class="ident">Value</a>) {</code></span>
+<span class="codeline" id="line-710"><code>		<span class="keyword">if</span> <label for="r81" class="ident">candidateSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> &amp;&amp; <label for="r86" class="ident">certSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-711"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-712"><code>		}</code></span>
-<span class="codeline" id="line-713"><code>	}</code></span>
-<span class="codeline" id="line-714"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-715"><code>}</code></span>
-<span class="codeline" id="line-716"><code></code></span>
-<span class="codeline" id="line-717"><code><span class="comment">// maxChainSignatureChecks is the maximum number of CheckSignatureFrom calls</span></code></span>
-<span class="codeline" id="line-718"><code><span class="comment">// that an invocation of buildChains will (transitively) make. Most chains are</span></code></span>
-<span class="codeline" id="line-719"><code><span class="comment">// less than 15 certificates long, so this leaves space for multiple chains and</span></code></span>
-<span class="codeline" id="line-720"><code><span class="comment">// for failed checks due to different intermediates having the same Subject.</span></code></span>
-<span class="codeline" id="line-721"><code><span class="keyword">const</span> <a href="../../../pkg/crypto/x509.html#name-maxChainSignatureChecks" class="ident">maxChainSignatureChecks</a> = <span class="lit-number">100</span></code></span>
-<span class="codeline" id="line-722"><code></code></span>
-<span class="codeline" id="line-723"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-errSignatureLimit" class="ident">errSignatureLimit</a> = <a href="../../../pkg/errors.html" class="ident i3">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: signature check attempts limit reached while verifying certificate chain"</span>)</code></span>
-<span class="codeline" id="line-724"><code></code></span>
-<span class="codeline" id="line-725"><code><span class="keyword">func</span> (<label for="r89" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r90" class="ident"><a href="../../../use/crypto/x509..Certificate.buildChains^bda2f.html" class="ident">buildChains</a></label>(<label for="r91" class="ident">currentChain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r92" class="ident">sigChecks</label> *<a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r93" class="ident">opts</label> *<a href="#line-192" class="ident">VerifyOptions</a>) (<label for="r94" class="ident">chains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r95" class="ident">err</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
-<span class="codeline" id="line-726"><code>	<span class="keyword">var</span> (</code></span>
-<span class="codeline" id="line-727"><code>		<label for="r96" class="ident">hintErr</label>  <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
-<span class="codeline" id="line-728"><code>		<label for="r97" class="ident">hintCert</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-729"><code>	)</code></span>
-<span class="codeline" id="line-730"><code></code></span>
-<span class="codeline" id="line-731"><code>	<label for="r98" class="ident">considerCandidate</label> := <span class="keyword">func</span>(<label for="r99" class="ident">certType</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r100" class="ident">candidate</label> <a href="cert_pool.go.html#line-125" class="ident">potentialParent</a>) {</code></span>
-<span class="codeline" id="line-732"><code>		<span class="keyword">if</span> <label for="r92" class="ident">sigChecks</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-733"><code>			<label for="r92" class="ident">sigChecks</label> = <a href="../../../pkg/builtin.html#name-new" class="ident">new</a>(<a href="../../../pkg/builtin.html#name-int" class="ident">int</a>)</code></span>
-<span class="codeline" id="line-734"><code>		}</code></span>
-<span class="codeline" id="line-735"><code>		*<label for="r92" class="ident">sigChecks</label>++</code></span>
-<span class="codeline" id="line-736"><code>		<span class="keyword">if</span> *<label for="r92" class="ident">sigChecks</label> &gt; <a href="#line-721" class="ident">maxChainSignatureChecks</a> {</code></span>
-<span class="codeline" id="line-737"><code>			<label for="r95" class="ident">err</label> = <a href="#line-723" class="ident">errSignatureLimit</a></code></span>
-<span class="codeline" id="line-738"><code>			<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-712"><code>		} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r81" class="ident">candidateSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <label for="r86" class="ident">certSAN</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-713"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-714"><code>		}</code></span>
+<span class="codeline" id="line-715"><code>		<span class="keyword">if</span> <a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r81" class="ident">candidateSAN</label>.<a href="pkix/pkix.go.html#line-116" class="ident">Value</a>, <label for="r86" class="ident">certSAN</label>.<a href="pkix/pkix.go.html#line-116" class="ident">Value</a>) {</code></span>
+<span class="codeline" id="line-716"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-717"><code>		}</code></span>
+<span class="codeline" id="line-718"><code>	}</code></span>
+<span class="codeline" id="line-719"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-720"><code>}</code></span>
+<span class="codeline" id="line-721"><code></code></span>
+<span class="codeline" id="line-722"><code><span class="comment">// maxChainSignatureChecks is the maximum number of CheckSignatureFrom calls</span></code></span>
+<span class="codeline" id="line-723"><code><span class="comment">// that an invocation of buildChains will (transitively) make. Most chains are</span></code></span>
+<span class="codeline" id="line-724"><code><span class="comment">// less than 15 certificates long, so this leaves space for multiple chains and</span></code></span>
+<span class="codeline" id="line-725"><code><span class="comment">// for failed checks due to different intermediates having the same Subject.</span></code></span>
+<span class="codeline" id="line-726"><code><span class="keyword">const</span> <a href="../../../pkg/crypto/x509.html#name-maxChainSignatureChecks" class="ident">maxChainSignatureChecks</a> = <span class="lit-number">100</span></code></span>
+<span class="codeline" id="line-727"><code></code></span>
+<span class="codeline" id="line-728"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-errSignatureLimit" class="ident">errSignatureLimit</a> = <a href="../../../pkg/errors.html" class="ident i5">errors</a>.<a href="../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"x509: signature check attempts limit reached while verifying certificate chain"</span>)</code></span>
+<span class="codeline" id="line-729"><code></code></span>
+<span class="codeline" id="line-730"><code><span class="keyword">func</span> (<label for="r89" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r90" class="ident"><a href="../../../use/crypto/x509..Certificate.buildChains^bda2f.html" class="ident">buildChains</a></label>(<label for="r91" class="ident">currentChain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r92" class="ident">sigChecks</label> *<a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r93" class="ident">opts</label> *<a href="#line-194" class="ident">VerifyOptions</a>) (<label for="r94" class="ident">chains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r95" class="ident">err</label> <a href="../../../pkg/builtin.html#name-error" class="ident">error</a>) {</code></span>
+<span class="codeline" id="line-731"><code>	<span class="keyword">var</span> (</code></span>
+<span class="codeline" id="line-732"><code>		<label for="r96" class="ident">hintErr</label>  <a href="../../../pkg/builtin.html#name-error" class="ident">error</a></code></span>
+<span class="codeline" id="line-733"><code>		<label for="r97" class="ident">hintCert</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-734"><code>	)</code></span>
+<span class="codeline" id="line-735"><code></code></span>
+<span class="codeline" id="line-736"><code>	<label for="r98" class="ident">considerCandidate</label> := <span class="keyword">func</span>(<label for="r99" class="ident">certType</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a>, <label for="r100" class="ident">candidate</label> <a href="cert_pool.go.html#line-125" class="ident">potentialParent</a>) {</code></span>
+<span class="codeline" id="line-737"><code>		<span class="keyword">if</span> <label for="r92" class="ident">sigChecks</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-738"><code>			<label for="r92" class="ident">sigChecks</label> = <a href="../../../pkg/builtin.html#name-new" class="ident">new</a>(<a href="../../../pkg/builtin.html#name-int" class="ident">int</a>)</code></span>
 <span class="codeline" id="line-739"><code>		}</code></span>
-<span class="codeline" id="line-740"><code></code></span>
-<span class="codeline" id="line-741"><code>		<span class="keyword">if</span> <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<a href="x509.go.html#line-715" class="ident">PublicKey</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <a href="#line-675" class="ident">alreadyInChain</a>(<label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>, <label for="r91" class="ident">currentChain</label>) {</code></span>
-<span class="codeline" id="line-742"><code>			<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-743"><code>		}</code></span>
-<span class="codeline" id="line-744"><code></code></span>
-<span class="codeline" id="line-745"><code>		<span class="keyword">if</span> <label for="r101" class="ident">err</label> := <label for="r89" class="ident">c</label>.<a href="x509.go.html#line-928" class="ident">CheckSignatureFrom</a>(<label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>); <label for="r101" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-746"><code>			<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-747"><code>				<label for="r96" class="ident">hintErr</label> = <label for="r101" class="ident">err</label></code></span>
-<span class="codeline" id="line-748"><code>				<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
-<span class="codeline" id="line-749"><code>			}</code></span>
-<span class="codeline" id="line-750"><code>			<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-751"><code>		}</code></span>
-<span class="codeline" id="line-752"><code></code></span>
-<span class="codeline" id="line-753"><code>		<label for="r95" class="ident">err</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<a href="#line-443" class="ident">isValid</a>(<label for="r99" class="ident">certType</label>, <label for="r91" class="ident">currentChain</label>, <label for="r93" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-754"><code>		<span class="keyword">if</span> <label for="r95" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-755"><code>			<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-756"><code>				<label for="r96" class="ident">hintErr</label> = <label for="r95" class="ident">err</label></code></span>
-<span class="codeline" id="line-757"><code>				<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
-<span class="codeline" id="line-758"><code>			}</code></span>
-<span class="codeline" id="line-759"><code>			<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-760"><code>		}</code></span>
-<span class="codeline" id="line-761"><code></code></span>
-<span class="codeline" id="line-762"><code>		<span class="keyword">if</span> <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-127" class="ident">constraint</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-763"><code>			<span class="keyword">if</span> <label for="r102" class="ident">err</label> := <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-127" class="ident">constraint</a>(<label for="r91" class="ident">currentChain</label>); <label for="r102" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-764"><code>				<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-765"><code>					<label for="r96" class="ident">hintErr</label> = <label for="r102" class="ident">err</label></code></span>
-<span class="codeline" id="line-766"><code>					<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
-<span class="codeline" id="line-767"><code>				}</code></span>
-<span class="codeline" id="line-768"><code>				<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-769"><code>			}</code></span>
-<span class="codeline" id="line-770"><code>		}</code></span>
-<span class="codeline" id="line-771"><code></code></span>
-<span class="codeline" id="line-772"><code>		<span class="keyword">switch</span> <label for="r99" class="ident">certType</label> {</code></span>
-<span class="codeline" id="line-773"><code>		<span class="keyword">case</span> <a href="#line-246" class="ident">rootCertificate</a>:</code></span>
-<span class="codeline" id="line-774"><code>			<label for="r94" class="ident">chains</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r94" class="ident">chains</label>, <a href="#line-663" class="ident">appendToFreshChain</a>(<label for="r91" class="ident">currentChain</label>, <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>))</code></span>
-<span class="codeline" id="line-775"><code>		<span class="keyword">case</span> <a href="#line-245" class="ident">intermediateCertificate</a>:</code></span>
-<span class="codeline" id="line-776"><code>			<span class="keyword">var</span> <label for="r103" class="ident">childChains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
-<span class="codeline" id="line-777"><code>			<label for="r103" class="ident">childChains</label>, <label for="r95" class="ident">err</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<label for="r90" class="ident">buildChains</label>(<a href="#line-663" class="ident">appendToFreshChain</a>(<label for="r91" class="ident">currentChain</label>, <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>), <label for="r92" class="ident">sigChecks</label>, <label for="r93" class="ident">opts</label>)</code></span>
-<span class="codeline" id="line-778"><code>			<label for="r94" class="ident">chains</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r94" class="ident">chains</label>, <label for="r103" class="ident">childChains</label>...)</code></span>
-<span class="codeline" id="line-779"><code>		}</code></span>
-<span class="codeline" id="line-780"><code>	}</code></span>
-<span class="codeline" id="line-781"><code></code></span>
-<span class="codeline" id="line-782"><code><label for="r104" class="ident">candidateLoop</label>:</code></span>
-<span class="codeline" id="line-783"><code>	<span class="keyword">for</span> <label for="r105" class="ident">_</label>, <label for="r106" class="ident">parents</label> := <span class="keyword">range</span> []<span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-784"><code>		<label for="r107" class="ident">certType</label>   <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-785"><code>		<label for="r108" class="ident">potentials</label> []<a href="cert_pool.go.html#line-125" class="ident">potentialParent</a></code></span>
-<span class="codeline" id="line-786"><code>	}{</code></span>
-<span class="codeline" id="line-787"><code>		{<a href="#line-246" class="ident">rootCertificate</a>, <label for="r93" class="ident">opts</label>.<a href="#line-203" class="ident">Roots</a>.<a href="cert_pool.go.html#line-132" class="ident">findPotentialParents</a>(<label for="r89" class="ident">c</label>)},</code></span>
-<span class="codeline" id="line-788"><code>		{<a href="#line-245" class="ident">intermediateCertificate</a>, <label for="r93" class="ident">opts</label>.<a href="#line-200" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-132" class="ident">findPotentialParents</a>(<label for="r89" class="ident">c</label>)},</code></span>
-<span class="codeline" id="line-789"><code>	} {</code></span>
-<span class="codeline" id="line-790"><code>		<span class="keyword">for</span> <label for="r109" class="ident">_</label>, <label for="r110" class="ident">parent</label> := <span class="keyword">range</span> <label for="r106" class="ident">parents</label>.<label for="r108" class="ident">potentials</label> {</code></span>
-<span class="codeline" id="line-791"><code>			<label for="r98" class="ident">considerCandidate</label>(<label for="r106" class="ident">parents</label>.<label for="r107" class="ident">certType</label>, <label for="r110" class="ident">parent</label>)</code></span>
-<span class="codeline" id="line-792"><code>			<span class="keyword">if</span> <label for="r95" class="ident">err</label> == <a href="#line-723" class="ident">errSignatureLimit</a> {</code></span>
-<span class="codeline" id="line-793"><code>				<span class="keyword">break</span> <label for="r104" class="ident">candidateLoop</label></code></span>
-<span class="codeline" id="line-794"><code>			}</code></span>
-<span class="codeline" id="line-795"><code>		}</code></span>
-<span class="codeline" id="line-796"><code>	}</code></span>
-<span class="codeline" id="line-797"><code></code></span>
-<span class="codeline" id="line-798"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r94" class="ident">chains</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-799"><code>		<label for="r95" class="ident">err</label> = <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-800"><code>	}</code></span>
-<span class="codeline" id="line-801"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r94" class="ident">chains</label>) == <span class="lit-number">0</span> &amp;&amp; <label for="r95" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-802"><code>		<label for="r95" class="ident">err</label> = <a href="#line-146" class="ident">UnknownAuthorityError</a>{<label for="r89" class="ident">c</label>, <label for="r96" class="ident">hintErr</label>, <label for="r97" class="ident">hintCert</label>}</code></span>
-<span class="codeline" id="line-803"><code>	}</code></span>
-<span class="codeline" id="line-804"><code></code></span>
-<span class="codeline" id="line-805"><code>	<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-806"><code>}</code></span>
-<span class="codeline" id="line-807"><code></code></span>
-<span class="codeline" id="line-808"><code><span class="keyword">func</span> <label for="r111" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostnamePattern" class="ident">validHostnamePattern</a></label>(<label for="r112" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> { <span class="keyword">return</span> <a href="#line-814" class="ident">validHostname</a>(<label for="r112" class="ident">host</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>) }</code></span>
-<span class="codeline" id="line-809"><code><span class="keyword">func</span> <label for="r113" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostnameInput" class="ident">validHostnameInput</a></label>(<label for="r114" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>   { <span class="keyword">return</span> <a href="#line-814" class="ident">validHostname</a>(<label for="r114" class="ident">host</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>) }</code></span>
-<span class="codeline" id="line-810"><code></code></span>
-<span class="codeline" id="line-811"><code><span class="comment">// validHostname reports whether host is a valid hostname that can be matched or</span></code></span>
-<span class="codeline" id="line-812"><code><span class="comment">// matched against according to RFC 6125 2.2, with some leniency to accommodate</span></code></span>
-<span class="codeline" id="line-813"><code><span class="comment">// legacy values.</span></code></span>
-<span class="codeline" id="line-814"><code><span class="keyword">func</span> <label for="r115" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostname" class="ident">validHostname</a></label>(<label for="r116" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r117" class="ident">isPattern</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-815"><code>	<span class="keyword">if</span> !<label for="r117" class="ident">isPattern</label> {</code></span>
-<span class="codeline" id="line-816"><code>		<label for="r116" class="ident">host</label> = <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-1128" class="ident">TrimSuffix</a>(<label for="r116" class="ident">host</label>, <span class="lit-string">"."</span>)</code></span>
-<span class="codeline" id="line-817"><code>	}</code></span>
-<span class="codeline" id="line-818"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r116" class="ident">host</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-819"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-820"><code>	}</code></span>
-<span class="codeline" id="line-821"><code>	<span class="keyword">if</span> <label for="r116" class="ident">host</label> == <span class="lit-string">"*"</span> {</code></span>
-<span class="codeline" id="line-822"><code>		<span class="comment">// Bare wildcards are not allowed, they are not valid DNS names,</span></code></span>
-<span class="codeline" id="line-823"><code><span class="comment">		// nor are they allowed per RFC 6125.</span></code></span>
+<span class="codeline" id="line-740"><code>		*<label for="r92" class="ident">sigChecks</label>++</code></span>
+<span class="codeline" id="line-741"><code>		<span class="keyword">if</span> *<label for="r92" class="ident">sigChecks</label> &gt; <a href="#line-726" class="ident">maxChainSignatureChecks</a> {</code></span>
+<span class="codeline" id="line-742"><code>			<label for="r95" class="ident">err</label> = <a href="#line-728" class="ident">errSignatureLimit</a></code></span>
+<span class="codeline" id="line-743"><code>			<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-744"><code>		}</code></span>
+<span class="codeline" id="line-745"><code></code></span>
+<span class="codeline" id="line-746"><code>		<span class="keyword">if</span> <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<a href="x509.go.html#line-715" class="ident">PublicKey</a> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> || <a href="#line-680" class="ident">alreadyInChain</a>(<label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>, <label for="r91" class="ident">currentChain</label>) {</code></span>
+<span class="codeline" id="line-747"><code>			<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-748"><code>		}</code></span>
+<span class="codeline" id="line-749"><code></code></span>
+<span class="codeline" id="line-750"><code>		<span class="keyword">if</span> <label for="r101" class="ident">err</label> := <label for="r89" class="ident">c</label>.<a href="x509.go.html#line-928" class="ident">CheckSignatureFrom</a>(<label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>); <label for="r101" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-751"><code>			<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-752"><code>				<label for="r96" class="ident">hintErr</label> = <label for="r101" class="ident">err</label></code></span>
+<span class="codeline" id="line-753"><code>				<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
+<span class="codeline" id="line-754"><code>			}</code></span>
+<span class="codeline" id="line-755"><code>			<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-756"><code>		}</code></span>
+<span class="codeline" id="line-757"><code></code></span>
+<span class="codeline" id="line-758"><code>		<label for="r95" class="ident">err</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<a href="#line-445" class="ident">isValid</a>(<label for="r99" class="ident">certType</label>, <label for="r91" class="ident">currentChain</label>, <label for="r93" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-759"><code>		<span class="keyword">if</span> <label for="r95" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-760"><code>			<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-761"><code>				<label for="r96" class="ident">hintErr</label> = <label for="r95" class="ident">err</label></code></span>
+<span class="codeline" id="line-762"><code>				<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
+<span class="codeline" id="line-763"><code>			}</code></span>
+<span class="codeline" id="line-764"><code>			<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-765"><code>		}</code></span>
+<span class="codeline" id="line-766"><code></code></span>
+<span class="codeline" id="line-767"><code>		<span class="keyword">if</span> <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-127" class="ident">constraint</a> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-768"><code>			<span class="keyword">if</span> <label for="r102" class="ident">err</label> := <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-127" class="ident">constraint</a>(<label for="r91" class="ident">currentChain</label>); <label for="r102" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-769"><code>				<span class="keyword">if</span> <label for="r96" class="ident">hintErr</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-770"><code>					<label for="r96" class="ident">hintErr</label> = <label for="r102" class="ident">err</label></code></span>
+<span class="codeline" id="line-771"><code>					<label for="r97" class="ident">hintCert</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a></code></span>
+<span class="codeline" id="line-772"><code>				}</code></span>
+<span class="codeline" id="line-773"><code>				<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-774"><code>			}</code></span>
+<span class="codeline" id="line-775"><code>		}</code></span>
+<span class="codeline" id="line-776"><code></code></span>
+<span class="codeline" id="line-777"><code>		<span class="keyword">switch</span> <label for="r99" class="ident">certType</label> {</code></span>
+<span class="codeline" id="line-778"><code>		<span class="keyword">case</span> <a href="#line-248" class="ident">rootCertificate</a>:</code></span>
+<span class="codeline" id="line-779"><code>			<label for="r94" class="ident">chains</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r94" class="ident">chains</label>, <a href="#line-668" class="ident">appendToFreshChain</a>(<label for="r91" class="ident">currentChain</label>, <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>))</code></span>
+<span class="codeline" id="line-780"><code>		<span class="keyword">case</span> <a href="#line-247" class="ident">intermediateCertificate</a>:</code></span>
+<span class="codeline" id="line-781"><code>			<span class="keyword">var</span> <label for="r103" class="ident">childChains</label> [][]*<a href="x509.go.html#line-704" class="ident">Certificate</a></code></span>
+<span class="codeline" id="line-782"><code>			<label for="r103" class="ident">childChains</label>, <label for="r95" class="ident">err</label> = <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>.<label for="r90" class="ident">buildChains</label>(<a href="#line-668" class="ident">appendToFreshChain</a>(<label for="r91" class="ident">currentChain</label>, <label for="r100" class="ident">candidate</label>.<a href="cert_pool.go.html#line-126" class="ident">cert</a>), <label for="r92" class="ident">sigChecks</label>, <label for="r93" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-783"><code>			<label for="r94" class="ident">chains</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r94" class="ident">chains</label>, <label for="r103" class="ident">childChains</label>...)</code></span>
+<span class="codeline" id="line-784"><code>		}</code></span>
+<span class="codeline" id="line-785"><code>	}</code></span>
+<span class="codeline" id="line-786"><code></code></span>
+<span class="codeline" id="line-787"><code><label for="r104" class="ident">candidateLoop</label>:</code></span>
+<span class="codeline" id="line-788"><code>	<span class="keyword">for</span> <label for="r105" class="ident">_</label>, <label for="r106" class="ident">parents</label> := <span class="keyword">range</span> []<span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-789"><code>		<label for="r107" class="ident">certType</label>   <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-790"><code>		<label for="r108" class="ident">potentials</label> []<a href="cert_pool.go.html#line-125" class="ident">potentialParent</a></code></span>
+<span class="codeline" id="line-791"><code>	}{</code></span>
+<span class="codeline" id="line-792"><code>		{<a href="#line-248" class="ident">rootCertificate</a>, <label for="r93" class="ident">opts</label>.<a href="#line-205" class="ident">Roots</a>.<a href="cert_pool.go.html#line-132" class="ident">findPotentialParents</a>(<label for="r89" class="ident">c</label>)},</code></span>
+<span class="codeline" id="line-793"><code>		{<a href="#line-247" class="ident">intermediateCertificate</a>, <label for="r93" class="ident">opts</label>.<a href="#line-202" class="ident">Intermediates</a>.<a href="cert_pool.go.html#line-132" class="ident">findPotentialParents</a>(<label for="r89" class="ident">c</label>)},</code></span>
+<span class="codeline" id="line-794"><code>	} {</code></span>
+<span class="codeline" id="line-795"><code>		<span class="keyword">for</span> <label for="r109" class="ident">_</label>, <label for="r110" class="ident">parent</label> := <span class="keyword">range</span> <label for="r106" class="ident">parents</label>.<label for="r108" class="ident">potentials</label> {</code></span>
+<span class="codeline" id="line-796"><code>			<label for="r98" class="ident">considerCandidate</label>(<label for="r106" class="ident">parents</label>.<label for="r107" class="ident">certType</label>, <label for="r110" class="ident">parent</label>)</code></span>
+<span class="codeline" id="line-797"><code>			<span class="keyword">if</span> <label for="r95" class="ident">err</label> == <a href="#line-728" class="ident">errSignatureLimit</a> {</code></span>
+<span class="codeline" id="line-798"><code>				<span class="keyword">break</span> <label for="r104" class="ident">candidateLoop</label></code></span>
+<span class="codeline" id="line-799"><code>			}</code></span>
+<span class="codeline" id="line-800"><code>		}</code></span>
+<span class="codeline" id="line-801"><code>	}</code></span>
+<span class="codeline" id="line-802"><code></code></span>
+<span class="codeline" id="line-803"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r94" class="ident">chains</label>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-804"><code>		<label for="r95" class="ident">err</label> = <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-805"><code>	}</code></span>
+<span class="codeline" id="line-806"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r94" class="ident">chains</label>) == <span class="lit-number">0</span> &amp;&amp; <label for="r95" class="ident">err</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-807"><code>		<label for="r95" class="ident">err</label> = <a href="#line-148" class="ident">UnknownAuthorityError</a>{<label for="r89" class="ident">c</label>, <label for="r96" class="ident">hintErr</label>, <label for="r97" class="ident">hintCert</label>}</code></span>
+<span class="codeline" id="line-808"><code>	}</code></span>
+<span class="codeline" id="line-809"><code></code></span>
+<span class="codeline" id="line-810"><code>	<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-811"><code>}</code></span>
+<span class="codeline" id="line-812"><code></code></span>
+<span class="codeline" id="line-813"><code><span class="keyword">func</span> <label for="r111" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostnamePattern" class="ident">validHostnamePattern</a></label>(<label for="r112" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> { <span class="keyword">return</span> <a href="#line-819" class="ident">validHostname</a>(<label for="r112" class="ident">host</label>, <a href="../../../pkg/builtin.html#name-true" class="ident">true</a>) }</code></span>
+<span class="codeline" id="line-814"><code><span class="keyword">func</span> <label for="r113" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostnameInput" class="ident">validHostnameInput</a></label>(<label for="r114" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>   { <span class="keyword">return</span> <a href="#line-819" class="ident">validHostname</a>(<label for="r114" class="ident">host</label>, <a href="../../../pkg/builtin.html#name-false" class="ident">false</a>) }</code></span>
+<span class="codeline" id="line-815"><code></code></span>
+<span class="codeline" id="line-816"><code><span class="comment">// validHostname reports whether host is a valid hostname that can be matched or</span></code></span>
+<span class="codeline" id="line-817"><code><span class="comment">// matched against according to RFC 6125 2.2, with some leniency to accommodate</span></code></span>
+<span class="codeline" id="line-818"><code><span class="comment">// legacy values.</span></code></span>
+<span class="codeline" id="line-819"><code><span class="keyword">func</span> <label for="r115" class="ident"><a href="../../../pkg/crypto/x509.html#name-validHostname" class="ident">validHostname</a></label>(<label for="r116" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r117" class="ident">isPattern</label> <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-820"><code>	<span class="keyword">if</span> !<label for="r117" class="ident">isPattern</label> {</code></span>
+<span class="codeline" id="line-821"><code>		<label for="r116" class="ident">host</label> = <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-1128" class="ident">TrimSuffix</a>(<label for="r116" class="ident">host</label>, <span class="lit-string">"."</span>)</code></span>
+<span class="codeline" id="line-822"><code>	}</code></span>
+<span class="codeline" id="line-823"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r116" class="ident">host</label>) == <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-824"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
 <span class="codeline" id="line-825"><code>	}</code></span>
-<span class="codeline" id="line-826"><code></code></span>
-<span class="codeline" id="line-827"><code>	<span class="keyword">for</span> <label for="r118" class="ident">i</label>, <label for="r119" class="ident">part</label> := <span class="keyword">range</span> <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<label for="r116" class="ident">host</label>, <span class="lit-string">"."</span>) {</code></span>
-<span class="codeline" id="line-828"><code>		<span class="keyword">if</span> <label for="r119" class="ident">part</label> == <span class="lit-string">""</span> {</code></span>
-<span class="codeline" id="line-829"><code>			<span class="comment">// Empty label.</span></code></span>
-<span class="codeline" id="line-830"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-831"><code>		}</code></span>
-<span class="codeline" id="line-832"><code>		<span class="keyword">if</span> <label for="r117" class="ident">isPattern</label> &amp;&amp; <label for="r118" class="ident">i</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r119" class="ident">part</label> == <span class="lit-string">"*"</span> {</code></span>
-<span class="codeline" id="line-833"><code>			<span class="comment">// Only allow full left-most wildcards, as those are the only ones</span></code></span>
-<span class="codeline" id="line-834"><code><span class="comment">			// we match, and matching literal '*' characters is probably never</span></code></span>
-<span class="codeline" id="line-835"><code><span class="comment">			// the expected behavior.</span></code></span>
-<span class="codeline" id="line-836"><code>			<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-837"><code>		}</code></span>
-<span class="codeline" id="line-838"><code>		<span class="keyword">for</span> <label for="r120" class="ident">j</label>, <label for="r121" class="ident">c</label> := <span class="keyword">range</span> <label for="r119" class="ident">part</label> {</code></span>
-<span class="codeline" id="line-839"><code>			<span class="keyword">if</span> <span class="lit-number">'a'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'z'</span> {</code></span>
-<span class="codeline" id="line-840"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-841"><code>			}</code></span>
-<span class="codeline" id="line-842"><code>			<span class="keyword">if</span> <span class="lit-number">'0'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'9'</span> {</code></span>
-<span class="codeline" id="line-843"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-844"><code>			}</code></span>
-<span class="codeline" id="line-845"><code>			<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
-<span class="codeline" id="line-846"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-847"><code>			}</code></span>
-<span class="codeline" id="line-848"><code>			<span class="keyword">if</span> <label for="r121" class="ident">c</label> == <span class="lit-number">'-'</span> &amp;&amp; <label for="r120" class="ident">j</label> != <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-849"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-850"><code>			}</code></span>
-<span class="codeline" id="line-851"><code>			<span class="keyword">if</span> <label for="r121" class="ident">c</label> == <span class="lit-number">'_'</span> {</code></span>
-<span class="codeline" id="line-852"><code>				<span class="comment">// Not a valid character in hostnames, but commonly</span></code></span>
-<span class="codeline" id="line-853"><code><span class="comment">				// found in deployments outside the WebPKI.</span></code></span>
+<span class="codeline" id="line-826"><code>	<span class="keyword">if</span> <label for="r116" class="ident">host</label> == <span class="lit-string">"*"</span> {</code></span>
+<span class="codeline" id="line-827"><code>		<span class="comment">// Bare wildcards are not allowed, they are not valid DNS names,</span></code></span>
+<span class="codeline" id="line-828"><code><span class="comment">		// nor are they allowed per RFC 6125.</span></code></span>
+<span class="codeline" id="line-829"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-830"><code>	}</code></span>
+<span class="codeline" id="line-831"><code></code></span>
+<span class="codeline" id="line-832"><code>	<span class="keyword">for</span> <label for="r118" class="ident">i</label>, <label for="r119" class="ident">part</label> := <span class="keyword">range</span> <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<label for="r116" class="ident">host</label>, <span class="lit-string">"."</span>) {</code></span>
+<span class="codeline" id="line-833"><code>		<span class="keyword">if</span> <label for="r119" class="ident">part</label> == <span class="lit-string">""</span> {</code></span>
+<span class="codeline" id="line-834"><code>			<span class="comment">// Empty label.</span></code></span>
+<span class="codeline" id="line-835"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-836"><code>		}</code></span>
+<span class="codeline" id="line-837"><code>		<span class="keyword">if</span> <label for="r117" class="ident">isPattern</label> &amp;&amp; <label for="r118" class="ident">i</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r119" class="ident">part</label> == <span class="lit-string">"*"</span> {</code></span>
+<span class="codeline" id="line-838"><code>			<span class="comment">// Only allow full left-most wildcards, as those are the only ones</span></code></span>
+<span class="codeline" id="line-839"><code><span class="comment">			// we match, and matching literal '*' characters is probably never</span></code></span>
+<span class="codeline" id="line-840"><code><span class="comment">			// the expected behavior.</span></code></span>
+<span class="codeline" id="line-841"><code>			<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-842"><code>		}</code></span>
+<span class="codeline" id="line-843"><code>		<span class="keyword">for</span> <label for="r120" class="ident">j</label>, <label for="r121" class="ident">c</label> := <span class="keyword">range</span> <label for="r119" class="ident">part</label> {</code></span>
+<span class="codeline" id="line-844"><code>			<span class="keyword">if</span> <span class="lit-number">'a'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'z'</span> {</code></span>
+<span class="codeline" id="line-845"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-846"><code>			}</code></span>
+<span class="codeline" id="line-847"><code>			<span class="keyword">if</span> <span class="lit-number">'0'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'9'</span> {</code></span>
+<span class="codeline" id="line-848"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-849"><code>			}</code></span>
+<span class="codeline" id="line-850"><code>			<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r121" class="ident">c</label> &amp;&amp; <label for="r121" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
+<span class="codeline" id="line-851"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-852"><code>			}</code></span>
+<span class="codeline" id="line-853"><code>			<span class="keyword">if</span> <label for="r121" class="ident">c</label> == <span class="lit-number">'-'</span> &amp;&amp; <label for="r120" class="ident">j</label> != <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-854"><code>				<span class="keyword">continue</span></code></span>
 <span class="codeline" id="line-855"><code>			}</code></span>
-<span class="codeline" id="line-856"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-857"><code>		}</code></span>
-<span class="codeline" id="line-858"><code>	}</code></span>
-<span class="codeline" id="line-859"><code></code></span>
-<span class="codeline" id="line-860"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-861"><code>}</code></span>
-<span class="codeline" id="line-862"><code></code></span>
-<span class="codeline" id="line-863"><code><span class="keyword">func</span> <label for="r122" class="ident"><a href="../../../pkg/crypto/x509.html#name-matchExactly" class="ident">matchExactly</a></label>(<label for="r123" class="ident">hostA</label>, <label for="r124" class="ident">hostB</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-864"><code>	<span class="keyword">if</span> <label for="r123" class="ident">hostA</label> == <span class="lit-string">""</span> || <label for="r123" class="ident">hostA</label> == <span class="lit-string">"."</span> || <label for="r124" class="ident">hostB</label> == <span class="lit-string">""</span> || <label for="r124" class="ident">hostB</label> == <span class="lit-string">"."</span> {</code></span>
-<span class="codeline" id="line-865"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-866"><code>	}</code></span>
-<span class="codeline" id="line-867"><code>	<span class="keyword">return</span> <a href="#line-898" class="ident">toLowerCaseASCII</a>(<label for="r123" class="ident">hostA</label>) == <a href="#line-898" class="ident">toLowerCaseASCII</a>(<label for="r124" class="ident">hostB</label>)</code></span>
-<span class="codeline" id="line-868"><code>}</code></span>
-<span class="codeline" id="line-869"><code></code></span>
-<span class="codeline" id="line-870"><code><span class="keyword">func</span> <label for="r125" class="ident"><a href="../../../pkg/crypto/x509.html#name-matchHostnames" class="ident">matchHostnames</a></label>(<label for="r126" class="ident">pattern</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r127" class="ident">hostParts</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-871"><code>	<label for="r126" class="ident">pattern</label> = <a href="#line-898" class="ident">toLowerCaseASCII</a>(<label for="r126" class="ident">pattern</label>)</code></span>
-<span class="codeline" id="line-872"><code></code></span>
-<span class="codeline" id="line-873"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r126" class="ident">pattern</label>) == <span class="lit-number">0</span> || <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r127" class="ident">hostParts</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-874"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-875"><code>	}</code></span>
-<span class="codeline" id="line-876"><code></code></span>
-<span class="codeline" id="line-877"><code>	<label for="r128" class="ident">patternParts</label> := <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<label for="r126" class="ident">pattern</label>, <span class="lit-string">"."</span>)</code></span>
-<span class="codeline" id="line-878"><code></code></span>
-<span class="codeline" id="line-879"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r128" class="ident">patternParts</label>) != <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r127" class="ident">hostParts</label>) {</code></span>
-<span class="codeline" id="line-880"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-881"><code>	}</code></span>
-<span class="codeline" id="line-882"><code></code></span>
-<span class="codeline" id="line-883"><code>	<span class="keyword">for</span> <label for="r129" class="ident">i</label>, <label for="r130" class="ident">patternPart</label> := <span class="keyword">range</span> <label for="r128" class="ident">patternParts</label> {</code></span>
-<span class="codeline" id="line-884"><code>		<span class="keyword">if</span> <label for="r129" class="ident">i</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r130" class="ident">patternPart</label> == <span class="lit-string">"*"</span> {</code></span>
-<span class="codeline" id="line-885"><code>			<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-886"><code>		}</code></span>
-<span class="codeline" id="line-887"><code>		<span class="keyword">if</span> <label for="r130" class="ident">patternPart</label> != <label for="r127" class="ident">hostParts</label>[<label for="r129" class="ident">i</label>] {</code></span>
-<span class="codeline" id="line-888"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-889"><code>		}</code></span>
-<span class="codeline" id="line-890"><code>	}</code></span>
-<span class="codeline" id="line-891"><code></code></span>
-<span class="codeline" id="line-892"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-893"><code>}</code></span>
-<span class="codeline" id="line-894"><code></code></span>
-<span class="codeline" id="line-895"><code><span class="comment">// toLowerCaseASCII returns a lower-case version of in. See RFC 6125 6.4.1. We use</span></code></span>
-<span class="codeline" id="line-896"><code><span class="comment">// an explicitly ASCII function to avoid any sharp corners resulting from</span></code></span>
-<span class="codeline" id="line-897"><code><span class="comment">// performing Unicode operations on DNS labels.</span></code></span>
-<span class="codeline" id="line-898"><code><span class="keyword">func</span> <label for="r131" class="ident"><a href="../../../pkg/crypto/x509.html#name-toLowerCaseASCII" class="ident">toLowerCaseASCII</a></label>(<label for="r132" class="ident">in</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-899"><code>	<span class="comment">// If the string is already lower-case then there's nothing to do.</span></code></span>
-<span class="codeline" id="line-900"><code>	<label for="r133" class="ident">isAlreadyLowerCase</label> := <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-901"><code>	<span class="keyword">for</span> <label for="r134" class="ident">_</label>, <label for="r135" class="ident">c</label> := <span class="keyword">range</span> <label for="r132" class="ident">in</label> {</code></span>
-<span class="codeline" id="line-902"><code>		<span class="keyword">if</span> <label for="r135" class="ident">c</label> == <a href="../../../pkg/unicode/utf8.html" class="ident i12">utf8</a>.<a href="../../unicode/utf8/utf8.go.html#line-16" class="ident">RuneError</a> {</code></span>
-<span class="codeline" id="line-903"><code>			<span class="comment">// If we get a UTF-8 error then there might be</span></code></span>
-<span class="codeline" id="line-904"><code><span class="comment">			// upper-case ASCII bytes in the invalid sequence.</span></code></span>
-<span class="codeline" id="line-905"><code>			<label for="r133" class="ident">isAlreadyLowerCase</label> = <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-906"><code>			<span class="keyword">break</span></code></span>
-<span class="codeline" id="line-907"><code>		}</code></span>
-<span class="codeline" id="line-908"><code>		<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r135" class="ident">c</label> &amp;&amp; <label for="r135" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
-<span class="codeline" id="line-909"><code>			<label for="r133" class="ident">isAlreadyLowerCase</label> = <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-910"><code>			<span class="keyword">break</span></code></span>
-<span class="codeline" id="line-911"><code>		}</code></span>
-<span class="codeline" id="line-912"><code>	}</code></span>
-<span class="codeline" id="line-913"><code></code></span>
-<span class="codeline" id="line-914"><code>	<span class="keyword">if</span> <label for="r133" class="ident">isAlreadyLowerCase</label> {</code></span>
-<span class="codeline" id="line-915"><code>		<span class="keyword">return</span> <label for="r132" class="ident">in</label></code></span>
-<span class="codeline" id="line-916"><code>	}</code></span>
-<span class="codeline" id="line-917"><code></code></span>
-<span class="codeline" id="line-918"><code>	<label for="r136" class="ident">out</label> := []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r132" class="ident">in</label>)</code></span>
-<span class="codeline" id="line-919"><code>	<span class="keyword">for</span> <label for="r137" class="ident">i</label>, <label for="r138" class="ident">c</label> := <span class="keyword">range</span> <label for="r136" class="ident">out</label> {</code></span>
-<span class="codeline" id="line-920"><code>		<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r138" class="ident">c</label> &amp;&amp; <label for="r138" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
-<span class="codeline" id="line-921"><code>			<label for="r136" class="ident">out</label>[<label for="r137" class="ident">i</label>] += <span class="lit-number">'a'</span> - <span class="lit-number">'A'</span></code></span>
-<span class="codeline" id="line-922"><code>		}</code></span>
-<span class="codeline" id="line-923"><code>	}</code></span>
-<span class="codeline" id="line-924"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r136" class="ident">out</label>)</code></span>
-<span class="codeline" id="line-925"><code>}</code></span>
-<span class="codeline" id="line-926"><code></code></span>
-<span class="codeline" id="line-927"><code><span class="comment">// VerifyHostname returns nil if c is a valid certificate for the named host.</span></code></span>
-<span class="codeline" id="line-928"><code><span class="comment">// Otherwise it returns an error describing the mismatch.</span></code></span>
-<span class="codeline" id="line-929"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-930"><code><span class="comment">// IP addresses can be optionally enclosed in square brackets and are checked</span></code></span>
-<span class="codeline" id="line-931"><code><span class="comment">// against the IPAddresses field. Other names are checked case insensitively</span></code></span>
-<span class="codeline" id="line-932"><code><span class="comment">// against the DNSNames field. If the names are valid hostnames, the certificate</span></code></span>
-<span class="codeline" id="line-933"><code><span class="comment">// fields can have a wildcard as the complete left-most label (e.g. *.example.com).</span></code></span>
+<span class="codeline" id="line-856"><code>			<span class="keyword">if</span> <label for="r121" class="ident">c</label> == <span class="lit-number">'_'</span> {</code></span>
+<span class="codeline" id="line-857"><code>				<span class="comment">// Not a valid character in hostnames, but commonly</span></code></span>
+<span class="codeline" id="line-858"><code><span class="comment">				// found in deployments outside the WebPKI.</span></code></span>
+<span class="codeline" id="line-859"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-860"><code>			}</code></span>
+<span class="codeline" id="line-861"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-862"><code>		}</code></span>
+<span class="codeline" id="line-863"><code>	}</code></span>
+<span class="codeline" id="line-864"><code></code></span>
+<span class="codeline" id="line-865"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-866"><code>}</code></span>
+<span class="codeline" id="line-867"><code></code></span>
+<span class="codeline" id="line-868"><code><span class="keyword">func</span> <label for="r122" class="ident"><a href="../../../pkg/crypto/x509.html#name-matchExactly" class="ident">matchExactly</a></label>(<label for="r123" class="ident">hostA</label>, <label for="r124" class="ident">hostB</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-869"><code>	<span class="keyword">if</span> <label for="r123" class="ident">hostA</label> == <span class="lit-string">""</span> || <label for="r123" class="ident">hostA</label> == <span class="lit-string">"."</span> || <label for="r124" class="ident">hostB</label> == <span class="lit-string">""</span> || <label for="r124" class="ident">hostB</label> == <span class="lit-string">"."</span> {</code></span>
+<span class="codeline" id="line-870"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-871"><code>	}</code></span>
+<span class="codeline" id="line-872"><code>	<span class="keyword">return</span> <a href="#line-903" class="ident">toLowerCaseASCII</a>(<label for="r123" class="ident">hostA</label>) == <a href="#line-903" class="ident">toLowerCaseASCII</a>(<label for="r124" class="ident">hostB</label>)</code></span>
+<span class="codeline" id="line-873"><code>}</code></span>
+<span class="codeline" id="line-874"><code></code></span>
+<span class="codeline" id="line-875"><code><span class="keyword">func</span> <label for="r125" class="ident"><a href="../../../pkg/crypto/x509.html#name-matchHostnames" class="ident">matchHostnames</a></label>(<label for="r126" class="ident">pattern</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>, <label for="r127" class="ident">hostParts</label> []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-876"><code>	<label for="r126" class="ident">pattern</label> = <a href="#line-903" class="ident">toLowerCaseASCII</a>(<label for="r126" class="ident">pattern</label>)</code></span>
+<span class="codeline" id="line-877"><code></code></span>
+<span class="codeline" id="line-878"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r126" class="ident">pattern</label>) == <span class="lit-number">0</span> || <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r127" class="ident">hostParts</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-879"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-880"><code>	}</code></span>
+<span class="codeline" id="line-881"><code></code></span>
+<span class="codeline" id="line-882"><code>	<label for="r128" class="ident">patternParts</label> := <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<label for="r126" class="ident">pattern</label>, <span class="lit-string">"."</span>)</code></span>
+<span class="codeline" id="line-883"><code></code></span>
+<span class="codeline" id="line-884"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r128" class="ident">patternParts</label>) != <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r127" class="ident">hostParts</label>) {</code></span>
+<span class="codeline" id="line-885"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-886"><code>	}</code></span>
+<span class="codeline" id="line-887"><code></code></span>
+<span class="codeline" id="line-888"><code>	<span class="keyword">for</span> <label for="r129" class="ident">i</label>, <label for="r130" class="ident">patternPart</label> := <span class="keyword">range</span> <label for="r128" class="ident">patternParts</label> {</code></span>
+<span class="codeline" id="line-889"><code>		<span class="keyword">if</span> <label for="r129" class="ident">i</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r130" class="ident">patternPart</label> == <span class="lit-string">"*"</span> {</code></span>
+<span class="codeline" id="line-890"><code>			<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-891"><code>		}</code></span>
+<span class="codeline" id="line-892"><code>		<span class="keyword">if</span> <label for="r130" class="ident">patternPart</label> != <label for="r127" class="ident">hostParts</label>[<label for="r129" class="ident">i</label>] {</code></span>
+<span class="codeline" id="line-893"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-894"><code>		}</code></span>
+<span class="codeline" id="line-895"><code>	}</code></span>
+<span class="codeline" id="line-896"><code></code></span>
+<span class="codeline" id="line-897"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-898"><code>}</code></span>
+<span class="codeline" id="line-899"><code></code></span>
+<span class="codeline" id="line-900"><code><span class="comment">// toLowerCaseASCII returns a lower-case version of in. See RFC 6125 6.4.1. We use</span></code></span>
+<span class="codeline" id="line-901"><code><span class="comment">// an explicitly ASCII function to avoid any sharp corners resulting from</span></code></span>
+<span class="codeline" id="line-902"><code><span class="comment">// performing Unicode operations on DNS labels.</span></code></span>
+<span class="codeline" id="line-903"><code><span class="keyword">func</span> <label for="r131" class="ident"><a href="../../../pkg/crypto/x509.html#name-toLowerCaseASCII" class="ident">toLowerCaseASCII</a></label>(<label for="r132" class="ident">in</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-904"><code>	<span class="comment">// If the string is already lower-case then there's nothing to do.</span></code></span>
+<span class="codeline" id="line-905"><code>	<label for="r133" class="ident">isAlreadyLowerCase</label> := <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-906"><code>	<span class="keyword">for</span> <label for="r134" class="ident">_</label>, <label for="r135" class="ident">c</label> := <span class="keyword">range</span> <label for="r132" class="ident">in</label> {</code></span>
+<span class="codeline" id="line-907"><code>		<span class="keyword">if</span> <label for="r135" class="ident">c</label> == <a href="../../../pkg/unicode/utf8.html" class="ident i14">utf8</a>.<a href="../../unicode/utf8/utf8.go.html#line-16" class="ident">RuneError</a> {</code></span>
+<span class="codeline" id="line-908"><code>			<span class="comment">// If we get a UTF-8 error then there might be</span></code></span>
+<span class="codeline" id="line-909"><code><span class="comment">			// upper-case ASCII bytes in the invalid sequence.</span></code></span>
+<span class="codeline" id="line-910"><code>			<label for="r133" class="ident">isAlreadyLowerCase</label> = <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-911"><code>			<span class="keyword">break</span></code></span>
+<span class="codeline" id="line-912"><code>		}</code></span>
+<span class="codeline" id="line-913"><code>		<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r135" class="ident">c</label> &amp;&amp; <label for="r135" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
+<span class="codeline" id="line-914"><code>			<label for="r133" class="ident">isAlreadyLowerCase</label> = <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-915"><code>			<span class="keyword">break</span></code></span>
+<span class="codeline" id="line-916"><code>		}</code></span>
+<span class="codeline" id="line-917"><code>	}</code></span>
+<span class="codeline" id="line-918"><code></code></span>
+<span class="codeline" id="line-919"><code>	<span class="keyword">if</span> <label for="r133" class="ident">isAlreadyLowerCase</label> {</code></span>
+<span class="codeline" id="line-920"><code>		<span class="keyword">return</span> <label for="r132" class="ident">in</label></code></span>
+<span class="codeline" id="line-921"><code>	}</code></span>
+<span class="codeline" id="line-922"><code></code></span>
+<span class="codeline" id="line-923"><code>	<label for="r136" class="ident">out</label> := []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r132" class="ident">in</label>)</code></span>
+<span class="codeline" id="line-924"><code>	<span class="keyword">for</span> <label for="r137" class="ident">i</label>, <label for="r138" class="ident">c</label> := <span class="keyword">range</span> <label for="r136" class="ident">out</label> {</code></span>
+<span class="codeline" id="line-925"><code>		<span class="keyword">if</span> <span class="lit-number">'A'</span> &lt;= <label for="r138" class="ident">c</label> &amp;&amp; <label for="r138" class="ident">c</label> &lt;= <span class="lit-number">'Z'</span> {</code></span>
+<span class="codeline" id="line-926"><code>			<label for="r136" class="ident">out</label>[<label for="r137" class="ident">i</label>] += <span class="lit-number">'a'</span> - <span class="lit-number">'A'</span></code></span>
+<span class="codeline" id="line-927"><code>		}</code></span>
+<span class="codeline" id="line-928"><code>	}</code></span>
+<span class="codeline" id="line-929"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r136" class="ident">out</label>)</code></span>
+<span class="codeline" id="line-930"><code>}</code></span>
+<span class="codeline" id="line-931"><code></code></span>
+<span class="codeline" id="line-932"><code><span class="comment">// VerifyHostname returns nil if c is a valid certificate for the named host.</span></code></span>
+<span class="codeline" id="line-933"><code><span class="comment">// Otherwise it returns an error describing the mismatch.</span></code></span>
 <span class="codeline" id="line-934"><code><span class="comment">//</span></code></span>
-<span class="codeline" id="line-935"><code><span class="comment">// Note that the legacy Common Name field is ignored.</span></code></span>
-<span class="codeline" id="line-936"><code><span class="keyword">func</span> (<label for="r139" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r140" class="ident"><a href="../../../use/crypto/x509..Certificate.VerifyHostname.html" class="ident">VerifyHostname</a></label>(<label for="r141" class="ident">h</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
-<span class="codeline" id="line-937"><code>	<span class="comment">// IP addresses may be written in [ ].</span></code></span>
-<span class="codeline" id="line-938"><code>	<label for="r142" class="ident">candidateIP</label> := <label for="r141" class="ident">h</label></code></span>
-<span class="codeline" id="line-939"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>) &gt;= <span class="lit-number">3</span> &amp;&amp; <label for="r141" class="ident">h</label>[<span class="lit-number">0</span>] == <span class="lit-number">'['</span> &amp;&amp; <label for="r141" class="ident">h</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>)-<span class="lit-number">1</span>] == <span class="lit-number">']'</span> {</code></span>
-<span class="codeline" id="line-940"><code>		<label for="r142" class="ident">candidateIP</label> = <label for="r141" class="ident">h</label>[<span class="lit-number">1</span> : <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>)-<span class="lit-number">1</span>]</code></span>
-<span class="codeline" id="line-941"><code>	}</code></span>
-<span class="codeline" id="line-942"><code>	<span class="keyword">if</span> <label for="r143" class="ident">ip</label> := <a href="../../../pkg/net.html" class="ident i7">net</a>.<a href="../../net/ip.go.html#line-527" class="ident">ParseIP</a>(<label for="r142" class="ident">candidateIP</label>); <label for="r143" class="ident">ip</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-943"><code>		<span class="comment">// We only match IP addresses against IP SANs.</span></code></span>
-<span class="codeline" id="line-944"><code><span class="comment">		// See RFC 6125, Appendix B.2.</span></code></span>
-<span class="codeline" id="line-945"><code>		<span class="keyword">for</span> <label for="r144" class="ident">_</label>, <label for="r145" class="ident">candidate</label> := <span class="keyword">range</span> <label for="r139" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a> {</code></span>
-<span class="codeline" id="line-946"><code>			<span class="keyword">if</span> <label for="r143" class="ident">ip</label>.<a href="../../net/ip.go.html#line-391" class="ident">Equal</a>(<label for="r145" class="ident">candidate</label>) {</code></span>
-<span class="codeline" id="line-947"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-948"><code>			}</code></span>
-<span class="codeline" id="line-949"><code>		}</code></span>
-<span class="codeline" id="line-950"><code>		<span class="keyword">return</span> <a href="#line-104" class="ident">HostnameError</a>{<label for="r139" class="ident">c</label>, <label for="r142" class="ident">candidateIP</label>}</code></span>
-<span class="codeline" id="line-951"><code>	}</code></span>
-<span class="codeline" id="line-952"><code></code></span>
-<span class="codeline" id="line-953"><code>	<label for="r146" class="ident">candidateName</label> := <a href="#line-898" class="ident">toLowerCaseASCII</a>(<label for="r141" class="ident">h</label>) <span class="comment">// Save allocations inside the loop.</span></code></span>
-<span class="codeline" id="line-954"><code>	<label for="r147" class="ident">validCandidateName</label> := <a href="#line-809" class="ident">validHostnameInput</a>(<label for="r146" class="ident">candidateName</label>)</code></span>
-<span class="codeline" id="line-955"><code>	<label for="r148" class="ident">hostParts</label> := <a href="#line-977" class="ident">splitHostname</a>(<label for="r146" class="ident">candidateName</label>)</code></span>
-<span class="codeline" id="line-956"><code></code></span>
-<span class="codeline" id="line-957"><code>	<span class="keyword">for</span> <label for="r149" class="ident">_</label>, <label for="r150" class="ident">match</label> := <span class="keyword">range</span> <label for="r139" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a> {</code></span>
-<span class="codeline" id="line-958"><code>		<span class="comment">// Ideally, we'd only match valid hostnames according to RFC 6125 like</span></code></span>
-<span class="codeline" id="line-959"><code><span class="comment">		// browsers (more or less) do, but in practice Go is used in a wider</span></code></span>
-<span class="codeline" id="line-960"><code><span class="comment">		// array of contexts and can't even assume DNS resolution. Instead,</span></code></span>
-<span class="codeline" id="line-961"><code><span class="comment">		// always allow perfect matches, and only apply wildcard and trailing</span></code></span>
-<span class="codeline" id="line-962"><code><span class="comment">		// dot processing to valid hostnames.</span></code></span>
-<span class="codeline" id="line-963"><code>		<span class="keyword">if</span> <label for="r147" class="ident">validCandidateName</label> &amp;&amp; <a href="#line-808" class="ident">validHostnamePattern</a>(<label for="r150" class="ident">match</label>) {</code></span>
-<span class="codeline" id="line-964"><code>			<span class="keyword">if</span> <a href="#line-870" class="ident">matchHostnames</a>(<label for="r150" class="ident">match</label>, <label for="r148" class="ident">hostParts</label>) {</code></span>
-<span class="codeline" id="line-965"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-966"><code>			}</code></span>
-<span class="codeline" id="line-967"><code>		} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-968"><code>			<span class="keyword">if</span> <a href="#line-863" class="ident">matchExactly</a>(<label for="r150" class="ident">match</label>, <label for="r146" class="ident">candidateName</label>) {</code></span>
-<span class="codeline" id="line-969"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-970"><code>			}</code></span>
-<span class="codeline" id="line-971"><code>		}</code></span>
-<span class="codeline" id="line-972"><code>	}</code></span>
-<span class="codeline" id="line-973"><code></code></span>
-<span class="codeline" id="line-974"><code>	<span class="keyword">return</span> <a href="#line-104" class="ident">HostnameError</a>{<label for="r139" class="ident">c</label>, <label for="r141" class="ident">h</label>}</code></span>
-<span class="codeline" id="line-975"><code>}</code></span>
-<span class="codeline" id="line-976"><code></code></span>
-<span class="codeline" id="line-977"><code><span class="keyword">func</span> <label for="r151" class="ident"><a href="../../../pkg/crypto/x509.html#name-splitHostname" class="ident">splitHostname</a></label>(<label for="r152" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
-<span class="codeline" id="line-978"><code>	<span class="keyword">return</span> <a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<a href="#line-898" class="ident">toLowerCaseASCII</a>(<a href="../../../pkg/strings.html" class="ident i10">strings</a>.<a href="../../strings/strings.go.html#line-1128" class="ident">TrimSuffix</a>(<label for="r152" class="ident">host</label>, <span class="lit-string">"."</span>)), <span class="lit-string">"."</span>)</code></span>
-<span class="codeline" id="line-979"><code>}</code></span>
-<span class="codeline" id="line-980"><code></code></span>
-<span class="codeline" id="line-981"><code><span class="keyword">func</span> <label for="r153" class="ident"><a href="../../../pkg/crypto/x509.html#name-checkChainForKeyUsage" class="ident">checkChainForKeyUsage</a></label>(<label for="r154" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r155" class="ident">keyUsages</label> []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-982"><code>	<label for="r156" class="ident">usages</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r155" class="ident">keyUsages</label>))</code></span>
-<span class="codeline" id="line-983"><code>	<a href="../../../pkg/builtin.html#name-copy" class="ident">copy</a>(<label for="r156" class="ident">usages</label>, <label for="r155" class="ident">keyUsages</label>)</code></span>
-<span class="codeline" id="line-984"><code></code></span>
-<span class="codeline" id="line-985"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r154" class="ident">chain</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-986"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-987"><code>	}</code></span>
-<span class="codeline" id="line-988"><code></code></span>
-<span class="codeline" id="line-989"><code>	<label for="r157" class="ident">usagesRemaining</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r156" class="ident">usages</label>)</code></span>
-<span class="codeline" id="line-990"><code></code></span>
-<span class="codeline" id="line-991"><code>	<span class="comment">// We walk down the list and cross out any usages that aren't supported</span></code></span>
-<span class="codeline" id="line-992"><code><span class="comment">	// by each certificate. If we cross out all the usages, then the chain</span></code></span>
-<span class="codeline" id="line-993"><code><span class="comment">	// is unacceptable.</span></code></span>
-<span class="codeline" id="line-994"><code></code></span>
-<span class="codeline" id="line-995"><code><label for="r158" class="ident">NextCert</label>:</code></span>
-<span class="codeline" id="line-996"><code>	<span class="keyword">for</span> <label for="r159" class="ident">i</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r154" class="ident">chain</label>) - <span class="lit-number">1</span>; <label for="r159" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r159" class="ident">i</label>-- {</code></span>
-<span class="codeline" id="line-997"><code>		<label for="r160" class="ident">cert</label> := <label for="r154" class="ident">chain</label>[<label for="r159" class="ident">i</label>]</code></span>
-<span class="codeline" id="line-998"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a>) == <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-747" class="ident">UnknownExtKeyUsage</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-999"><code>			<span class="comment">// The certificate doesn't have any extended key usage specified.</span></code></span>
-<span class="codeline" id="line-1000"><code>			<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-1001"><code>		}</code></span>
-<span class="codeline" id="line-1002"><code></code></span>
-<span class="codeline" id="line-1003"><code>		<span class="keyword">for</span> <label for="r161" class="ident">_</label>, <label for="r162" class="ident">usage</label> := <span class="keyword">range</span> <label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a> {</code></span>
-<span class="codeline" id="line-1004"><code>			<span class="keyword">if</span> <label for="r162" class="ident">usage</label> == <a href="x509.go.html#line-635" class="ident">ExtKeyUsageAny</a> {</code></span>
-<span class="codeline" id="line-1005"><code>				<span class="comment">// The certificate is explicitly good for any usage.</span></code></span>
-<span class="codeline" id="line-1006"><code>				<span class="keyword">continue</span> <label for="r158" class="ident">NextCert</label></code></span>
-<span class="codeline" id="line-1007"><code>			}</code></span>
-<span class="codeline" id="line-1008"><code>		}</code></span>
-<span class="codeline" id="line-1009"><code></code></span>
-<span class="codeline" id="line-1010"><code>		<span class="keyword">const</span> <label for="r163" class="ident">invalidUsage</label> = -<span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-1011"><code></code></span>
-<span class="codeline" id="line-1012"><code>	<label for="r164" class="ident">NextRequestedUsage</label>:</code></span>
-<span class="codeline" id="line-1013"><code>		<span class="keyword">for</span> <label for="r165" class="ident">i</label>, <label for="r166" class="ident">requestedUsage</label> := <span class="keyword">range</span> <label for="r156" class="ident">usages</label> {</code></span>
-<span class="codeline" id="line-1014"><code>			<span class="keyword">if</span> <label for="r166" class="ident">requestedUsage</label> == <label for="r163" class="ident">invalidUsage</label> {</code></span>
-<span class="codeline" id="line-1015"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-1016"><code>			}</code></span>
-<span class="codeline" id="line-1017"><code></code></span>
-<span class="codeline" id="line-1018"><code>			<span class="keyword">for</span> <label for="r167" class="ident">_</label>, <label for="r168" class="ident">usage</label> := <span class="keyword">range</span> <label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a> {</code></span>
-<span class="codeline" id="line-1019"><code>				<span class="keyword">if</span> <label for="r166" class="ident">requestedUsage</label> == <label for="r168" class="ident">usage</label> {</code></span>
-<span class="codeline" id="line-1020"><code>					<span class="keyword">continue</span> <label for="r164" class="ident">NextRequestedUsage</label></code></span>
-<span class="codeline" id="line-1021"><code>				}</code></span>
-<span class="codeline" id="line-1022"><code>			}</code></span>
-<span class="codeline" id="line-1023"><code></code></span>
-<span class="codeline" id="line-1024"><code>			<label for="r156" class="ident">usages</label>[<label for="r165" class="ident">i</label>] = <label for="r163" class="ident">invalidUsage</label></code></span>
-<span class="codeline" id="line-1025"><code>			<label for="r157" class="ident">usagesRemaining</label>--</code></span>
-<span class="codeline" id="line-1026"><code>			<span class="keyword">if</span> <label for="r157" class="ident">usagesRemaining</label> == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1027"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-1028"><code>			}</code></span>
-<span class="codeline" id="line-1029"><code>		}</code></span>
-<span class="codeline" id="line-1030"><code>	}</code></span>
-<span class="codeline" id="line-1031"><code></code></span>
-<span class="codeline" id="line-1032"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1033"><code>}</code></span>
-<span class="codeline" id="line-1034"><code></code></span>
-<span class="codeline" id="line-1035"><code><span class="keyword">func</span> <label for="r169" class="ident"><a href="../../../pkg/crypto/x509.html#name-mustNewOIDFromInts" class="ident">mustNewOIDFromInts</a></label>(<label for="r170" class="ident">ints</label> []<a href="../../../pkg/builtin.html#name-uint64" class="ident">uint64</a>) <a href="oid.go.html#line-23" class="ident">OID</a> {</code></span>
-<span class="codeline" id="line-1036"><code>	<label for="r171" class="ident">oid</label>, <label for="r172" class="ident">err</label> := <a href="oid.go.html#line-55" class="ident">OIDFromInts</a>(<label for="r170" class="ident">ints</label>)</code></span>
-<span class="codeline" id="line-1037"><code>	<span class="keyword">if</span> <label for="r172" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1038"><code>		<a href="../../../pkg/builtin.html#name-panic" class="ident">panic</a>(<a href="../../../pkg/fmt.html" class="ident i4">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"OIDFromInts(%v) unexpected error: %v"</span>, <label for="r170" class="ident">ints</label>, <label for="r172" class="ident">err</label>))</code></span>
-<span class="codeline" id="line-1039"><code>	}</code></span>
-<span class="codeline" id="line-1040"><code>	<span class="keyword">return</span> <label for="r171" class="ident">oid</label></code></span>
-<span class="codeline" id="line-1041"><code>}</code></span>
-<span class="codeline" id="line-1042"><code></code></span>
-<span class="codeline" id="line-1043"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-policyGraphNode" class="ident">policyGraphNode</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-1044"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html" class="ident">validPolicy</a>       <a href="oid.go.html#line-23" class="ident">OID</a></code></span>
-<span class="codeline" id="line-1045"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html" class="ident">expectedPolicySet</a> []<a href="oid.go.html#line-23" class="ident">OID</a></code></span>
-<span class="codeline" id="line-1046"><code>	<span class="comment">// we do not implement qualifiers, so we don't track qualifier_set</span></code></span>
+<span class="codeline" id="line-935"><code><span class="comment">// IP addresses can be optionally enclosed in square brackets and are checked</span></code></span>
+<span class="codeline" id="line-936"><code><span class="comment">// against the IPAddresses field. Other names are checked case insensitively</span></code></span>
+<span class="codeline" id="line-937"><code><span class="comment">// against the DNSNames field. If the names are valid hostnames, the certificate</span></code></span>
+<span class="codeline" id="line-938"><code><span class="comment">// fields can have a wildcard as the complete left-most label (e.g. *.example.com).</span></code></span>
+<span class="codeline" id="line-939"><code><span class="comment">//</span></code></span>
+<span class="codeline" id="line-940"><code><span class="comment">// Note that the legacy Common Name field is ignored.</span></code></span>
+<span class="codeline" id="line-941"><code><span class="keyword">func</span> (<label for="r139" class="ident">c</label> *<a href="x509.go.html#line-704" class="ident">Certificate</a>) <label for="r140" class="ident"><a href="../../../use/crypto/x509..Certificate.VerifyHostname.html" class="ident">VerifyHostname</a></label>(<label for="r141" class="ident">h</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) <a href="../../../pkg/builtin.html#name-error" class="ident">error</a> {</code></span>
+<span class="codeline" id="line-942"><code>	<span class="comment">// IP addresses may be written in [ ].</span></code></span>
+<span class="codeline" id="line-943"><code>	<label for="r142" class="ident">candidateIP</label> := <label for="r141" class="ident">h</label></code></span>
+<span class="codeline" id="line-944"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>) &gt;= <span class="lit-number">3</span> &amp;&amp; <label for="r141" class="ident">h</label>[<span class="lit-number">0</span>] == <span class="lit-number">'['</span> &amp;&amp; <label for="r141" class="ident">h</label>[<a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>)-<span class="lit-number">1</span>] == <span class="lit-number">']'</span> {</code></span>
+<span class="codeline" id="line-945"><code>		<label for="r142" class="ident">candidateIP</label> = <label for="r141" class="ident">h</label>[<span class="lit-number">1</span> : <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r141" class="ident">h</label>)-<span class="lit-number">1</span>]</code></span>
+<span class="codeline" id="line-946"><code>	}</code></span>
+<span class="codeline" id="line-947"><code>	<span class="keyword">if</span> <label for="r143" class="ident">ip</label> := <a href="../../../pkg/net.html" class="ident i9">net</a>.<a href="../../net/ip.go.html#line-527" class="ident">ParseIP</a>(<label for="r142" class="ident">candidateIP</label>); <label for="r143" class="ident">ip</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-948"><code>		<span class="comment">// We only match IP addresses against IP SANs.</span></code></span>
+<span class="codeline" id="line-949"><code><span class="comment">		// See RFC 6125, Appendix B.2.</span></code></span>
+<span class="codeline" id="line-950"><code>		<span class="keyword">for</span> <label for="r144" class="ident">_</label>, <label for="r145" class="ident">candidate</label> := <span class="keyword">range</span> <label for="r139" class="ident">c</label>.<a href="x509.go.html#line-785" class="ident">IPAddresses</a> {</code></span>
+<span class="codeline" id="line-951"><code>			<span class="keyword">if</span> <label for="r143" class="ident">ip</label>.<a href="../../net/ip.go.html#line-391" class="ident">Equal</a>(<label for="r145" class="ident">candidate</label>) {</code></span>
+<span class="codeline" id="line-952"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-953"><code>			}</code></span>
+<span class="codeline" id="line-954"><code>		}</code></span>
+<span class="codeline" id="line-955"><code>		<span class="keyword">return</span> <a href="#line-106" class="ident">HostnameError</a>{<label for="r139" class="ident">c</label>, <label for="r142" class="ident">candidateIP</label>}</code></span>
+<span class="codeline" id="line-956"><code>	}</code></span>
+<span class="codeline" id="line-957"><code></code></span>
+<span class="codeline" id="line-958"><code>	<label for="r146" class="ident">candidateName</label> := <a href="#line-903" class="ident">toLowerCaseASCII</a>(<label for="r141" class="ident">h</label>) <span class="comment">// Save allocations inside the loop.</span></code></span>
+<span class="codeline" id="line-959"><code>	<label for="r147" class="ident">validCandidateName</label> := <a href="#line-814" class="ident">validHostnameInput</a>(<label for="r146" class="ident">candidateName</label>)</code></span>
+<span class="codeline" id="line-960"><code>	<label for="r148" class="ident">hostParts</label> := <a href="#line-982" class="ident">splitHostname</a>(<label for="r146" class="ident">candidateName</label>)</code></span>
+<span class="codeline" id="line-961"><code></code></span>
+<span class="codeline" id="line-962"><code>	<span class="keyword">for</span> <label for="r149" class="ident">_</label>, <label for="r150" class="ident">match</label> := <span class="keyword">range</span> <label for="r139" class="ident">c</label>.<a href="x509.go.html#line-783" class="ident">DNSNames</a> {</code></span>
+<span class="codeline" id="line-963"><code>		<span class="comment">// Ideally, we'd only match valid hostnames according to RFC 6125 like</span></code></span>
+<span class="codeline" id="line-964"><code><span class="comment">		// browsers (more or less) do, but in practice Go is used in a wider</span></code></span>
+<span class="codeline" id="line-965"><code><span class="comment">		// array of contexts and can't even assume DNS resolution. Instead,</span></code></span>
+<span class="codeline" id="line-966"><code><span class="comment">		// always allow perfect matches, and only apply wildcard and trailing</span></code></span>
+<span class="codeline" id="line-967"><code><span class="comment">		// dot processing to valid hostnames.</span></code></span>
+<span class="codeline" id="line-968"><code>		<span class="keyword">if</span> <label for="r147" class="ident">validCandidateName</label> &amp;&amp; <a href="#line-813" class="ident">validHostnamePattern</a>(<label for="r150" class="ident">match</label>) {</code></span>
+<span class="codeline" id="line-969"><code>			<span class="keyword">if</span> <a href="#line-875" class="ident">matchHostnames</a>(<label for="r150" class="ident">match</label>, <label for="r148" class="ident">hostParts</label>) {</code></span>
+<span class="codeline" id="line-970"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-971"><code>			}</code></span>
+<span class="codeline" id="line-972"><code>		} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-973"><code>			<span class="keyword">if</span> <a href="#line-868" class="ident">matchExactly</a>(<label for="r150" class="ident">match</label>, <label for="r146" class="ident">candidateName</label>) {</code></span>
+<span class="codeline" id="line-974"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-975"><code>			}</code></span>
+<span class="codeline" id="line-976"><code>		}</code></span>
+<span class="codeline" id="line-977"><code>	}</code></span>
+<span class="codeline" id="line-978"><code></code></span>
+<span class="codeline" id="line-979"><code>	<span class="keyword">return</span> <a href="#line-106" class="ident">HostnameError</a>{<label for="r139" class="ident">c</label>, <label for="r141" class="ident">h</label>}</code></span>
+<span class="codeline" id="line-980"><code>}</code></span>
+<span class="codeline" id="line-981"><code></code></span>
+<span class="codeline" id="line-982"><code><span class="keyword">func</span> <label for="r151" class="ident"><a href="../../../pkg/crypto/x509.html#name-splitHostname" class="ident">splitHostname</a></label>(<label for="r152" class="ident">host</label> <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>) []<a href="../../../pkg/builtin.html#name-string" class="ident">string</a> {</code></span>
+<span class="codeline" id="line-983"><code>	<span class="keyword">return</span> <a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-361" class="ident">Split</a>(<a href="#line-903" class="ident">toLowerCaseASCII</a>(<a href="../../../pkg/strings.html" class="ident i12">strings</a>.<a href="../../strings/strings.go.html#line-1128" class="ident">TrimSuffix</a>(<label for="r152" class="ident">host</label>, <span class="lit-string">"."</span>)), <span class="lit-string">"."</span>)</code></span>
+<span class="codeline" id="line-984"><code>}</code></span>
+<span class="codeline" id="line-985"><code></code></span>
+<span class="codeline" id="line-986"><code><span class="keyword">func</span> <label for="r153" class="ident"><a href="../../../pkg/crypto/x509.html#name-checkChainForKeyUsage" class="ident">checkChainForKeyUsage</a></label>(<label for="r154" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r155" class="ident">keyUsages</label> []<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-987"><code>	<label for="r156" class="ident">usages</label> := <a href="../../../pkg/builtin.html#name-make" class="ident">make</a>([]<a href="x509.go.html#line-632" class="ident">ExtKeyUsage</a>, <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r155" class="ident">keyUsages</label>))</code></span>
+<span class="codeline" id="line-988"><code>	<a href="../../../pkg/builtin.html#name-copy" class="ident">copy</a>(<label for="r156" class="ident">usages</label>, <label for="r155" class="ident">keyUsages</label>)</code></span>
+<span class="codeline" id="line-989"><code></code></span>
+<span class="codeline" id="line-990"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r154" class="ident">chain</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-991"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-992"><code>	}</code></span>
+<span class="codeline" id="line-993"><code></code></span>
+<span class="codeline" id="line-994"><code>	<label for="r157" class="ident">usagesRemaining</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r156" class="ident">usages</label>)</code></span>
+<span class="codeline" id="line-995"><code></code></span>
+<span class="codeline" id="line-996"><code>	<span class="comment">// We walk down the list and cross out any usages that aren't supported</span></code></span>
+<span class="codeline" id="line-997"><code><span class="comment">	// by each certificate. If we cross out all the usages, then the chain</span></code></span>
+<span class="codeline" id="line-998"><code><span class="comment">	// is unacceptable.</span></code></span>
+<span class="codeline" id="line-999"><code></code></span>
+<span class="codeline" id="line-1000"><code><label for="r158" class="ident">NextCert</label>:</code></span>
+<span class="codeline" id="line-1001"><code>	<span class="keyword">for</span> <label for="r159" class="ident">i</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r154" class="ident">chain</label>) - <span class="lit-number">1</span>; <label for="r159" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r159" class="ident">i</label>-- {</code></span>
+<span class="codeline" id="line-1002"><code>		<label for="r160" class="ident">cert</label> := <label for="r154" class="ident">chain</label>[<label for="r159" class="ident">i</label>]</code></span>
+<span class="codeline" id="line-1003"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a>) == <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-747" class="ident">UnknownExtKeyUsage</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1004"><code>			<span class="comment">// The certificate doesn't have any extended key usage specified.</span></code></span>
+<span class="codeline" id="line-1005"><code>			<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-1006"><code>		}</code></span>
+<span class="codeline" id="line-1007"><code></code></span>
+<span class="codeline" id="line-1008"><code>		<span class="keyword">for</span> <label for="r161" class="ident">_</label>, <label for="r162" class="ident">usage</label> := <span class="keyword">range</span> <label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a> {</code></span>
+<span class="codeline" id="line-1009"><code>			<span class="keyword">if</span> <label for="r162" class="ident">usage</label> == <a href="x509.go.html#line-635" class="ident">ExtKeyUsageAny</a> {</code></span>
+<span class="codeline" id="line-1010"><code>				<span class="comment">// The certificate is explicitly good for any usage.</span></code></span>
+<span class="codeline" id="line-1011"><code>				<span class="keyword">continue</span> <label for="r158" class="ident">NextCert</label></code></span>
+<span class="codeline" id="line-1012"><code>			}</code></span>
+<span class="codeline" id="line-1013"><code>		}</code></span>
+<span class="codeline" id="line-1014"><code></code></span>
+<span class="codeline" id="line-1015"><code>		<span class="keyword">const</span> <label for="r163" class="ident">invalidUsage</label> = -<span class="lit-number">1</span></code></span>
+<span class="codeline" id="line-1016"><code></code></span>
+<span class="codeline" id="line-1017"><code>	<label for="r164" class="ident">NextRequestedUsage</label>:</code></span>
+<span class="codeline" id="line-1018"><code>		<span class="keyword">for</span> <label for="r165" class="ident">i</label>, <label for="r166" class="ident">requestedUsage</label> := <span class="keyword">range</span> <label for="r156" class="ident">usages</label> {</code></span>
+<span class="codeline" id="line-1019"><code>			<span class="keyword">if</span> <label for="r166" class="ident">requestedUsage</label> == <label for="r163" class="ident">invalidUsage</label> {</code></span>
+<span class="codeline" id="line-1020"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-1021"><code>			}</code></span>
+<span class="codeline" id="line-1022"><code></code></span>
+<span class="codeline" id="line-1023"><code>			<span class="keyword">for</span> <label for="r167" class="ident">_</label>, <label for="r168" class="ident">usage</label> := <span class="keyword">range</span> <label for="r160" class="ident">cert</label>.<a href="x509.go.html#line-746" class="ident">ExtKeyUsage</a> {</code></span>
+<span class="codeline" id="line-1024"><code>				<span class="keyword">if</span> <label for="r166" class="ident">requestedUsage</label> == <label for="r168" class="ident">usage</label> {</code></span>
+<span class="codeline" id="line-1025"><code>					<span class="keyword">continue</span> <label for="r164" class="ident">NextRequestedUsage</label></code></span>
+<span class="codeline" id="line-1026"><code>				}</code></span>
+<span class="codeline" id="line-1027"><code>			}</code></span>
+<span class="codeline" id="line-1028"><code></code></span>
+<span class="codeline" id="line-1029"><code>			<label for="r156" class="ident">usages</label>[<label for="r165" class="ident">i</label>] = <label for="r163" class="ident">invalidUsage</label></code></span>
+<span class="codeline" id="line-1030"><code>			<label for="r157" class="ident">usagesRemaining</label>--</code></span>
+<span class="codeline" id="line-1031"><code>			<span class="keyword">if</span> <label for="r157" class="ident">usagesRemaining</label> == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1032"><code>				<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1033"><code>			}</code></span>
+<span class="codeline" id="line-1034"><code>		}</code></span>
+<span class="codeline" id="line-1035"><code>	}</code></span>
+<span class="codeline" id="line-1036"><code></code></span>
+<span class="codeline" id="line-1037"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1038"><code>}</code></span>
+<span class="codeline" id="line-1039"><code></code></span>
+<span class="codeline" id="line-1040"><code><span class="keyword">func</span> <label for="r169" class="ident"><a href="../../../pkg/crypto/x509.html#name-mustNewOIDFromInts" class="ident">mustNewOIDFromInts</a></label>(<label for="r170" class="ident">ints</label> []<a href="../../../pkg/builtin.html#name-uint64" class="ident">uint64</a>) <a href="oid.go.html#line-23" class="ident">OID</a> {</code></span>
+<span class="codeline" id="line-1041"><code>	<label for="r171" class="ident">oid</label>, <label for="r172" class="ident">err</label> := <a href="oid.go.html#line-55" class="ident">OIDFromInts</a>(<label for="r170" class="ident">ints</label>)</code></span>
+<span class="codeline" id="line-1042"><code>	<span class="keyword">if</span> <label for="r172" class="ident">err</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1043"><code>		<a href="../../../pkg/builtin.html#name-panic" class="ident">panic</a>(<a href="../../../pkg/fmt.html" class="ident i6">fmt</a>.<a href="../../fmt/print.go.html#line-237" class="ident">Sprintf</a>(<span class="lit-string">"OIDFromInts(%v) unexpected error: %v"</span>, <label for="r170" class="ident">ints</label>, <label for="r172" class="ident">err</label>))</code></span>
+<span class="codeline" id="line-1044"><code>	}</code></span>
+<span class="codeline" id="line-1045"><code>	<span class="keyword">return</span> <label for="r171" class="ident">oid</label></code></span>
+<span class="codeline" id="line-1046"><code>}</code></span>
 <span class="codeline" id="line-1047"><code></code></span>
-<span class="codeline" id="line-1048"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html" class="ident">parents</a>  <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-1049"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.children^10910.html" class="ident">children</a> <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
-<span class="codeline" id="line-1050"><code>}</code></span>
-<span class="codeline" id="line-1051"><code></code></span>
-<span class="codeline" id="line-1052"><code><span class="keyword">func</span> <label for="r173" class="ident"><a href="../../../pkg/crypto/x509.html#name-newPolicyGraphNode" class="ident">newPolicyGraphNode</a></label>(<label for="r174" class="ident">valid</label> <a href="oid.go.html#line-23" class="ident">OID</a>, <label for="r175" class="ident">parents</label> []*<a href="#line-1043" class="ident">policyGraphNode</a>) *<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1053"><code>	<label for="r176" class="ident">n</label> := &amp;<a href="#line-1043" class="ident">policyGraphNode</a>{</code></span>
-<span class="codeline" id="line-1054"><code>		<a href="#line-1044" class="ident">validPolicy</a>:       <label for="r174" class="ident">valid</label>,</code></span>
-<span class="codeline" id="line-1055"><code>		<a href="#line-1045" class="ident">expectedPolicySet</a>: []<a href="oid.go.html#line-23" class="ident">OID</a>{<label for="r174" class="ident">valid</label>},</code></span>
-<span class="codeline" id="line-1056"><code>		<a href="#line-1049" class="ident">children</a>:          <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
-<span class="codeline" id="line-1057"><code>		<a href="#line-1048" class="ident">parents</a>:           <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
-<span class="codeline" id="line-1058"><code>	}</code></span>
-<span class="codeline" id="line-1059"><code>	<span class="keyword">for</span> <label for="r177" class="ident">_</label>, <label for="r178" class="ident">p</label> := <span class="keyword">range</span> <label for="r175" class="ident">parents</label> {</code></span>
-<span class="codeline" id="line-1060"><code>		<label for="r178" class="ident">p</label>.<a href="#line-1049" class="ident">children</a>[<label for="r176" class="ident">n</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1061"><code>		<label for="r176" class="ident">n</label>.<a href="#line-1048" class="ident">parents</a>[<label for="r178" class="ident">p</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1062"><code>	}</code></span>
-<span class="codeline" id="line-1063"><code>	<span class="keyword">return</span> <label for="r176" class="ident">n</label></code></span>
-<span class="codeline" id="line-1064"><code>}</code></span>
-<span class="codeline" id="line-1065"><code></code></span>
-<span class="codeline" id="line-1066"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-policyGraph" class="ident">policyGraph</a> <span class="keyword">struct</span> {</code></span>
-<span class="codeline" id="line-1067"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html" class="ident">strata</a> []<span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1043" class="ident">policyGraphNode</a></code></span>
-<span class="codeline" id="line-1068"><code>	<span class="comment">// map of OID -&gt; nodes at strata[depth-1] with OID in their expectedPolicySet</span></code></span>
-<span class="codeline" id="line-1069"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html" class="ident">parentIndex</a> <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1043" class="ident">policyGraphNode</a></code></span>
-<span class="codeline" id="line-1070"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.depth^ded32.html" class="ident">depth</a>       <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-1071"><code>}</code></span>
-<span class="codeline" id="line-1072"><code></code></span>
-<span class="codeline" id="line-1073"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-anyPolicyOID" class="ident">anyPolicyOID</a> = <a href="#line-1035" class="ident">mustNewOIDFromInts</a>([]<a href="../../../pkg/builtin.html#name-uint64" class="ident">uint64</a>{<span class="lit-number">2</span>, <span class="lit-number">5</span>, <span class="lit-number">29</span>, <span class="lit-number">32</span>, <span class="lit-number">0</span>})</code></span>
-<span class="codeline" id="line-1074"><code></code></span>
-<span class="codeline" id="line-1075"><code><span class="keyword">func</span> <label for="r179" class="ident"><a href="../../../pkg/crypto/x509.html#name-newPolicyGraph" class="ident">newPolicyGraph</a></label>() *<a href="#line-1066" class="ident">policyGraph</a> {</code></span>
-<span class="codeline" id="line-1076"><code>	<label for="r180" class="ident">root</label> := <a href="#line-1043" class="ident">policyGraphNode</a>{</code></span>
-<span class="codeline" id="line-1077"><code>		<a href="#line-1044" class="ident">validPolicy</a>:       <a href="#line-1073" class="ident">anyPolicyOID</a>,</code></span>
-<span class="codeline" id="line-1078"><code>		<a href="#line-1045" class="ident">expectedPolicySet</a>: []<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="#line-1073" class="ident">anyPolicyOID</a>},</code></span>
-<span class="codeline" id="line-1079"><code>		<a href="#line-1049" class="ident">children</a>:          <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
-<span class="codeline" id="line-1080"><code>		<a href="#line-1048" class="ident">parents</a>:           <span class="keyword">map</span>[*<a href="#line-1043" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
-<span class="codeline" id="line-1081"><code>	}</code></span>
-<span class="codeline" id="line-1082"><code>	<span class="keyword">return</span> &amp;<a href="#line-1066" class="ident">policyGraph</a>{</code></span>
-<span class="codeline" id="line-1083"><code>		<a href="#line-1070" class="ident">depth</a>:  <span class="lit-number">0</span>,</code></span>
-<span class="codeline" id="line-1084"><code>		<a href="#line-1067" class="ident">strata</a>: []<span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1043" class="ident">policyGraphNode</a>{{<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>): &amp;<label for="r180" class="ident">root</label>}},</code></span>
-<span class="codeline" id="line-1085"><code>	}</code></span>
-<span class="codeline" id="line-1086"><code>}</code></span>
-<span class="codeline" id="line-1087"><code></code></span>
-<span class="codeline" id="line-1088"><code><span class="keyword">func</span> (<label for="r181" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r182" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.insert^1e225.html" class="ident">insert</a></label>(<label for="r183" class="ident">n</label> *<a href="#line-1043" class="ident">policyGraphNode</a>) {</code></span>
-<span class="codeline" id="line-1089"><code>	<label for="r181" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r181" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r183" class="ident">n</label>.<a href="#line-1044" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <label for="r183" class="ident">n</label></code></span>
-<span class="codeline" id="line-1090"><code>}</code></span>
-<span class="codeline" id="line-1091"><code></code></span>
-<span class="codeline" id="line-1092"><code><span class="keyword">func</span> (<label for="r184" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r185" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html" class="ident">parentsWithExpected</a></label>(<label for="r186" class="ident">expected</label> <a href="oid.go.html#line-23" class="ident">OID</a>) []*<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1093"><code>	<span class="keyword">if</span> <label for="r184" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1094"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-1095"><code>	}</code></span>
-<span class="codeline" id="line-1096"><code>	<span class="keyword">return</span> <label for="r184" class="ident">pg</label>.<a href="#line-1069" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r186" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
-<span class="codeline" id="line-1097"><code>}</code></span>
-<span class="codeline" id="line-1098"><code></code></span>
-<span class="codeline" id="line-1099"><code><span class="keyword">func</span> (<label for="r187" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r188" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html" class="ident">parentWithAnyPolicy</a></label>() *<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1100"><code>	<span class="keyword">if</span> <label for="r187" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1101"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-1102"><code>	}</code></span>
-<span class="codeline" id="line-1103"><code>	<span class="keyword">return</span> <label for="r187" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r187" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>-<span class="lit-number">1</span>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
-<span class="codeline" id="line-1104"><code>}</code></span>
-<span class="codeline" id="line-1105"><code></code></span>
-<span class="codeline" id="line-1106"><code><span class="keyword">func</span> (<label for="r189" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r190" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html" class="ident">parents</a></label>() <a href="../../../pkg/iter.html" class="ident i5">iter</a>.<a href="../../iter/iter.go.html#line-223" class="ident">Seq</a>[*<a href="#line-1043" class="ident">policyGraphNode</a>] {</code></span>
-<span class="codeline" id="line-1107"><code>	<span class="keyword">if</span> <label for="r189" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1108"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-1109"><code>	}</code></span>
-<span class="codeline" id="line-1110"><code>	<span class="keyword">return</span> <a href="../../../pkg/maps.html" class="ident i6">maps</a>.<a href="../../maps/iter.go.html#line-38" class="ident">Values</a>(<label for="r189" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r189" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>-<span class="lit-number">1</span>])</code></span>
-<span class="codeline" id="line-1111"><code>}</code></span>
-<span class="codeline" id="line-1112"><code></code></span>
-<span class="codeline" id="line-1113"><code><span class="keyword">func</span> (<label for="r191" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r192" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html" class="ident">leaves</a></label>() <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1114"><code>	<span class="keyword">return</span> <label for="r191" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r191" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>]</code></span>
-<span class="codeline" id="line-1115"><code>}</code></span>
-<span class="codeline" id="line-1116"><code></code></span>
-<span class="codeline" id="line-1117"><code><span class="keyword">func</span> (<label for="r193" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r194" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html" class="ident">leafWithPolicy</a></label>(<label for="r195" class="ident">policy</label> <a href="oid.go.html#line-23" class="ident">OID</a>) *<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1118"><code>	<span class="keyword">return</span> <label for="r193" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r193" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r195" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
-<span class="codeline" id="line-1119"><code>}</code></span>
-<span class="codeline" id="line-1120"><code></code></span>
-<span class="codeline" id="line-1121"><code><span class="keyword">func</span> (<label for="r196" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r197" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html" class="ident">deleteLeaf</a></label>(<label for="r198" class="ident">policy</label> <a href="oid.go.html#line-23" class="ident">OID</a>) {</code></span>
-<span class="codeline" id="line-1122"><code>	<label for="r199" class="ident">n</label> := <label for="r196" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r196" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r198" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
-<span class="codeline" id="line-1123"><code>	<span class="keyword">if</span> <label for="r199" class="ident">n</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1124"><code>		<span class="keyword">return</span></code></span>
-<span class="codeline" id="line-1125"><code>	}</code></span>
-<span class="codeline" id="line-1126"><code>	<span class="keyword">for</span> <label for="r200" class="ident">p</label> := <span class="keyword">range</span> <label for="r199" class="ident">n</label>.<a href="#line-1048" class="ident">parents</a> {</code></span>
-<span class="codeline" id="line-1127"><code>		<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r200" class="ident">p</label>.<a href="#line-1049" class="ident">children</a>, <label for="r199" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1128"><code>	}</code></span>
-<span class="codeline" id="line-1129"><code>	<span class="keyword">for</span> <label for="r201" class="ident">c</label> := <span class="keyword">range</span> <label for="r199" class="ident">n</label>.<a href="#line-1049" class="ident">children</a> {</code></span>
-<span class="codeline" id="line-1130"><code>		<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r201" class="ident">c</label>.<a href="#line-1048" class="ident">parents</a>, <label for="r199" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1131"><code>	}</code></span>
-<span class="codeline" id="line-1132"><code>	<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r196" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r196" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>], <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r198" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>))</code></span>
-<span class="codeline" id="line-1133"><code>}</code></span>
-<span class="codeline" id="line-1134"><code></code></span>
-<span class="codeline" id="line-1135"><code><span class="keyword">func</span> (<label for="r202" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r203" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html" class="ident">validPolicyNodes</a></label>() []*<a href="#line-1043" class="ident">policyGraphNode</a> {</code></span>
-<span class="codeline" id="line-1136"><code>	<span class="keyword">var</span> <label for="r204" class="ident">validNodes</label> []*<a href="#line-1043" class="ident">policyGraphNode</a></code></span>
-<span class="codeline" id="line-1137"><code>	<span class="keyword">for</span> <label for="r205" class="ident">i</label> := <label for="r202" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>; <label for="r205" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r205" class="ident">i</label>-- {</code></span>
-<span class="codeline" id="line-1138"><code>		<span class="keyword">for</span> <label for="r206" class="ident">_</label>, <label for="r207" class="ident">n</label> := <span class="keyword">range</span> <label for="r202" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r205" class="ident">i</label>] {</code></span>
-<span class="codeline" id="line-1139"><code>			<span class="keyword">if</span> <label for="r207" class="ident">n</label>.<a href="#line-1044" class="ident">validPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>) {</code></span>
-<span class="codeline" id="line-1140"><code>				<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-1141"><code>			}</code></span>
-<span class="codeline" id="line-1142"><code></code></span>
-<span class="codeline" id="line-1143"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r207" class="ident">n</label>.<a href="#line-1048" class="ident">parents</a>) == <span class="lit-number">1</span> {</code></span>
-<span class="codeline" id="line-1144"><code>				<span class="keyword">for</span> <label for="r208" class="ident">p</label> := <span class="keyword">range</span> <label for="r207" class="ident">n</label>.<a href="#line-1048" class="ident">parents</a> {</code></span>
-<span class="codeline" id="line-1145"><code>					<span class="keyword">if</span> <label for="r208" class="ident">p</label>.<a href="#line-1044" class="ident">validPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>) {</code></span>
-<span class="codeline" id="line-1146"><code>						<label for="r204" class="ident">validNodes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r204" class="ident">validNodes</label>, <label for="r207" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1147"><code>					}</code></span>
-<span class="codeline" id="line-1148"><code>				}</code></span>
-<span class="codeline" id="line-1149"><code>			}</code></span>
-<span class="codeline" id="line-1150"><code>		}</code></span>
-<span class="codeline" id="line-1151"><code>	}</code></span>
-<span class="codeline" id="line-1152"><code>	<span class="keyword">return</span> <label for="r204" class="ident">validNodes</label></code></span>
-<span class="codeline" id="line-1153"><code>}</code></span>
-<span class="codeline" id="line-1154"><code></code></span>
-<span class="codeline" id="line-1155"><code><span class="keyword">func</span> (<label for="r209" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r210" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.prune^6c831.html" class="ident">prune</a></label>() {</code></span>
-<span class="codeline" id="line-1156"><code>	<span class="keyword">for</span> <label for="r211" class="ident">i</label> := <label for="r209" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a> - <span class="lit-number">1</span>; <label for="r211" class="ident">i</label> &gt; <span class="lit-number">0</span>; <label for="r211" class="ident">i</label>-- {</code></span>
-<span class="codeline" id="line-1157"><code>		<span class="keyword">for</span> <label for="r212" class="ident">_</label>, <label for="r213" class="ident">n</label> := <span class="keyword">range</span> <label for="r209" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r211" class="ident">i</label>] {</code></span>
-<span class="codeline" id="line-1158"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r213" class="ident">n</label>.<a href="#line-1049" class="ident">children</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1159"><code>				<span class="keyword">for</span> <label for="r214" class="ident">p</label> := <span class="keyword">range</span> <label for="r213" class="ident">n</label>.<a href="#line-1048" class="ident">parents</a> {</code></span>
-<span class="codeline" id="line-1160"><code>					<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r214" class="ident">p</label>.<a href="#line-1049" class="ident">children</a>, <label for="r213" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1161"><code>				}</code></span>
-<span class="codeline" id="line-1162"><code>				<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r209" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r211" class="ident">i</label>], <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r213" class="ident">n</label>.<a href="#line-1044" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>))</code></span>
-<span class="codeline" id="line-1163"><code>			}</code></span>
-<span class="codeline" id="line-1164"><code>		}</code></span>
-<span class="codeline" id="line-1165"><code>	}</code></span>
-<span class="codeline" id="line-1166"><code>}</code></span>
-<span class="codeline" id="line-1167"><code></code></span>
-<span class="codeline" id="line-1168"><code><span class="keyword">func</span> (<label for="r215" class="ident">pg</label> *<a href="#line-1066" class="ident">policyGraph</a>) <label for="r216" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html" class="ident">incrDepth</a></label>() {</code></span>
-<span class="codeline" id="line-1169"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1069" class="ident">parentIndex</a> = <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1043" class="ident">policyGraphNode</a>{}</code></span>
-<span class="codeline" id="line-1170"><code>	<span class="keyword">for</span> <label for="r217" class="ident">_</label>, <label for="r218" class="ident">n</label> := <span class="keyword">range</span> <label for="r215" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>[<label for="r215" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>] {</code></span>
-<span class="codeline" id="line-1171"><code>		<span class="keyword">for</span> <label for="r219" class="ident">_</label>, <label for="r220" class="ident">e</label> := <span class="keyword">range</span> <label for="r218" class="ident">n</label>.<a href="#line-1045" class="ident">expectedPolicySet</a> {</code></span>
-<span class="codeline" id="line-1172"><code>			<label for="r215" class="ident">pg</label>.<a href="#line-1069" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r220" class="ident">e</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r215" class="ident">pg</label>.<a href="#line-1069" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r220" class="ident">e</label>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r218" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1173"><code>		}</code></span>
-<span class="codeline" id="line-1174"><code>	}</code></span>
-<span class="codeline" id="line-1175"><code></code></span>
-<span class="codeline" id="line-1176"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1070" class="ident">depth</a>++</code></span>
-<span class="codeline" id="line-1177"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r215" class="ident">pg</label>.<a href="#line-1067" class="ident">strata</a>, <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1043" class="ident">policyGraphNode</a>{})</code></span>
-<span class="codeline" id="line-1178"><code>}</code></span>
-<span class="codeline" id="line-1179"><code></code></span>
-<span class="codeline" id="line-1180"><code><span class="keyword">func</span> <label for="r221" class="ident"><a href="../../../pkg/crypto/x509.html#name-policiesValid" class="ident">policiesValid</a></label>(<label for="r222" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r223" class="ident">opts</label> <a href="#line-192" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
-<span class="codeline" id="line-1181"><code>	<span class="comment">// The following code implements the policy verification algorithm as</span></code></span>
-<span class="codeline" id="line-1182"><code><span class="comment">	// specified in RFC 5280 and updated by RFC 9618. In particular the</span></code></span>
-<span class="codeline" id="line-1183"><code><span class="comment">	// following sections are replaced by RFC 9618:</span></code></span>
-<span class="codeline" id="line-1184"><code><span class="comment">	//	* 6.1.2 (a)</span></code></span>
-<span class="codeline" id="line-1185"><code><span class="comment">	//	* 6.1.3 (d)</span></code></span>
-<span class="codeline" id="line-1186"><code><span class="comment">	//	* 6.1.3 (e)</span></code></span>
-<span class="codeline" id="line-1187"><code><span class="comment">	//	* 6.1.3 (f)</span></code></span>
-<span class="codeline" id="line-1188"><code><span class="comment">	//	* 6.1.4 (b)</span></code></span>
-<span class="codeline" id="line-1189"><code><span class="comment">	//	* 6.1.5 (g)</span></code></span>
-<span class="codeline" id="line-1190"><code></code></span>
-<span class="codeline" id="line-1191"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r222" class="ident">chain</label>) == <span class="lit-number">1</span> {</code></span>
-<span class="codeline" id="line-1192"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1193"><code>	}</code></span>
-<span class="codeline" id="line-1194"><code></code></span>
-<span class="codeline" id="line-1195"><code>	<span class="comment">// n is the length of the chain minus the trust anchor</span></code></span>
-<span class="codeline" id="line-1196"><code>	<label for="r224" class="ident">n</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r222" class="ident">chain</label>) - <span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-1197"><code></code></span>
-<span class="codeline" id="line-1198"><code>	<label for="r225" class="ident">pg</label> := <a href="#line-1075" class="ident">newPolicyGraph</a>()</code></span>
-<span class="codeline" id="line-1199"><code>	<span class="keyword">var</span> <label for="r226" class="ident">inhibitAnyPolicy</label>, <label for="r227" class="ident">explicitPolicy</label>, <label for="r228" class="ident">policyMapping</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
-<span class="codeline" id="line-1200"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-240" class="ident">inhibitAnyPolicy</a> {</code></span>
-<span class="codeline" id="line-1201"><code>		<label for="r226" class="ident">inhibitAnyPolicy</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-1202"><code>	}</code></span>
-<span class="codeline" id="line-1203"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-236" class="ident">requireExplicitPolicy</a> {</code></span>
-<span class="codeline" id="line-1204"><code>		<label for="r227" class="ident">explicitPolicy</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-1205"><code>	}</code></span>
-<span class="codeline" id="line-1206"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-232" class="ident">inhibitPolicyMapping</a> {</code></span>
-<span class="codeline" id="line-1207"><code>		<label for="r228" class="ident">policyMapping</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
-<span class="codeline" id="line-1208"><code>	}</code></span>
-<span class="codeline" id="line-1209"><code></code></span>
-<span class="codeline" id="line-1210"><code>	<label for="r229" class="ident">initialUserPolicySet</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
-<span class="codeline" id="line-1211"><code>	<span class="keyword">for</span> <label for="r230" class="ident">_</label>, <label for="r231" class="ident">p</label> := <span class="keyword">range</span> <label for="r223" class="ident">opts</label>.<a href="#line-224" class="ident">CertificatePolicies</a> {</code></span>
-<span class="codeline" id="line-1212"><code>		<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r231" class="ident">p</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1048"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-policyGraphNode" class="ident">policyGraphNode</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-1049"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html" class="ident">validPolicy</a>       <a href="oid.go.html#line-23" class="ident">OID</a></code></span>
+<span class="codeline" id="line-1050"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html" class="ident">expectedPolicySet</a> []<a href="oid.go.html#line-23" class="ident">OID</a></code></span>
+<span class="codeline" id="line-1051"><code>	<span class="comment">// we do not implement qualifiers, so we don't track qualifier_set</span></code></span>
+<span class="codeline" id="line-1052"><code></code></span>
+<span class="codeline" id="line-1053"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html" class="ident">parents</a>  <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-1054"><code>	<a href="../../../use/crypto/x509..policyGraphNode^5c8b0.children^10910.html" class="ident">children</a> <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a></code></span>
+<span class="codeline" id="line-1055"><code>}</code></span>
+<span class="codeline" id="line-1056"><code></code></span>
+<span class="codeline" id="line-1057"><code><span class="keyword">func</span> <label for="r173" class="ident"><a href="../../../pkg/crypto/x509.html#name-newPolicyGraphNode" class="ident">newPolicyGraphNode</a></label>(<label for="r174" class="ident">valid</label> <a href="oid.go.html#line-23" class="ident">OID</a>, <label for="r175" class="ident">parents</label> []*<a href="#line-1048" class="ident">policyGraphNode</a>) *<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1058"><code>	<label for="r176" class="ident">n</label> := &amp;<a href="#line-1048" class="ident">policyGraphNode</a>{</code></span>
+<span class="codeline" id="line-1059"><code>		<a href="#line-1049" class="ident">validPolicy</a>:       <label for="r174" class="ident">valid</label>,</code></span>
+<span class="codeline" id="line-1060"><code>		<a href="#line-1050" class="ident">expectedPolicySet</a>: []<a href="oid.go.html#line-23" class="ident">OID</a>{<label for="r174" class="ident">valid</label>},</code></span>
+<span class="codeline" id="line-1061"><code>		<a href="#line-1054" class="ident">children</a>:          <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
+<span class="codeline" id="line-1062"><code>		<a href="#line-1053" class="ident">parents</a>:           <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
+<span class="codeline" id="line-1063"><code>	}</code></span>
+<span class="codeline" id="line-1064"><code>	<span class="keyword">for</span> <label for="r177" class="ident">_</label>, <label for="r178" class="ident">p</label> := <span class="keyword">range</span> <label for="r175" class="ident">parents</label> {</code></span>
+<span class="codeline" id="line-1065"><code>		<label for="r178" class="ident">p</label>.<a href="#line-1054" class="ident">children</a>[<label for="r176" class="ident">n</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1066"><code>		<label for="r176" class="ident">n</label>.<a href="#line-1053" class="ident">parents</a>[<label for="r178" class="ident">p</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1067"><code>	}</code></span>
+<span class="codeline" id="line-1068"><code>	<span class="keyword">return</span> <label for="r176" class="ident">n</label></code></span>
+<span class="codeline" id="line-1069"><code>}</code></span>
+<span class="codeline" id="line-1070"><code></code></span>
+<span class="codeline" id="line-1071"><code><span class="keyword">type</span> <a href="../../../pkg/crypto/x509.html#name-policyGraph" class="ident">policyGraph</a> <span class="keyword">struct</span> {</code></span>
+<span class="codeline" id="line-1072"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html" class="ident">strata</a> []<span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1048" class="ident">policyGraphNode</a></code></span>
+<span class="codeline" id="line-1073"><code>	<span class="comment">// map of OID -&gt; nodes at strata[depth-1] with OID in their expectedPolicySet</span></code></span>
+<span class="codeline" id="line-1074"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html" class="ident">parentIndex</a> <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1048" class="ident">policyGraphNode</a></code></span>
+<span class="codeline" id="line-1075"><code>	<a href="../../../use/crypto/x509..policyGraph^f0ba7.depth^ded32.html" class="ident">depth</a>       <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-1076"><code>}</code></span>
+<span class="codeline" id="line-1077"><code></code></span>
+<span class="codeline" id="line-1078"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-anyPolicyOID" class="ident">anyPolicyOID</a> = <a href="#line-1040" class="ident">mustNewOIDFromInts</a>([]<a href="../../../pkg/builtin.html#name-uint64" class="ident">uint64</a>{<span class="lit-number">2</span>, <span class="lit-number">5</span>, <span class="lit-number">29</span>, <span class="lit-number">32</span>, <span class="lit-number">0</span>})</code></span>
+<span class="codeline" id="line-1079"><code></code></span>
+<span class="codeline" id="line-1080"><code><span class="keyword">func</span> <label for="r179" class="ident"><a href="../../../pkg/crypto/x509.html#name-newPolicyGraph" class="ident">newPolicyGraph</a></label>() *<a href="#line-1071" class="ident">policyGraph</a> {</code></span>
+<span class="codeline" id="line-1081"><code>	<label for="r180" class="ident">root</label> := <a href="#line-1048" class="ident">policyGraphNode</a>{</code></span>
+<span class="codeline" id="line-1082"><code>		<a href="#line-1049" class="ident">validPolicy</a>:       <a href="#line-1078" class="ident">anyPolicyOID</a>,</code></span>
+<span class="codeline" id="line-1083"><code>		<a href="#line-1050" class="ident">expectedPolicySet</a>: []<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="#line-1078" class="ident">anyPolicyOID</a>},</code></span>
+<span class="codeline" id="line-1084"><code>		<a href="#line-1054" class="ident">children</a>:          <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
+<span class="codeline" id="line-1085"><code>		<a href="#line-1053" class="ident">parents</a>:           <span class="keyword">map</span>[*<a href="#line-1048" class="ident">policyGraphNode</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{},</code></span>
+<span class="codeline" id="line-1086"><code>	}</code></span>
+<span class="codeline" id="line-1087"><code>	<span class="keyword">return</span> &amp;<a href="#line-1071" class="ident">policyGraph</a>{</code></span>
+<span class="codeline" id="line-1088"><code>		<a href="#line-1075" class="ident">depth</a>:  <span class="lit-number">0</span>,</code></span>
+<span class="codeline" id="line-1089"><code>		<a href="#line-1072" class="ident">strata</a>: []<span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1048" class="ident">policyGraphNode</a>{{<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>): &amp;<label for="r180" class="ident">root</label>}},</code></span>
+<span class="codeline" id="line-1090"><code>	}</code></span>
+<span class="codeline" id="line-1091"><code>}</code></span>
+<span class="codeline" id="line-1092"><code></code></span>
+<span class="codeline" id="line-1093"><code><span class="keyword">func</span> (<label for="r181" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r182" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.insert^1e225.html" class="ident">insert</a></label>(<label for="r183" class="ident">n</label> *<a href="#line-1048" class="ident">policyGraphNode</a>) {</code></span>
+<span class="codeline" id="line-1094"><code>	<label for="r181" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r181" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r183" class="ident">n</label>.<a href="#line-1049" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <label for="r183" class="ident">n</label></code></span>
+<span class="codeline" id="line-1095"><code>}</code></span>
+<span class="codeline" id="line-1096"><code></code></span>
+<span class="codeline" id="line-1097"><code><span class="keyword">func</span> (<label for="r184" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r185" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html" class="ident">parentsWithExpected</a></label>(<label for="r186" class="ident">expected</label> <a href="oid.go.html#line-23" class="ident">OID</a>) []*<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1098"><code>	<span class="keyword">if</span> <label for="r184" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1099"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-1100"><code>	}</code></span>
+<span class="codeline" id="line-1101"><code>	<span class="keyword">return</span> <label for="r184" class="ident">pg</label>.<a href="#line-1074" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r186" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
+<span class="codeline" id="line-1102"><code>}</code></span>
+<span class="codeline" id="line-1103"><code></code></span>
+<span class="codeline" id="line-1104"><code><span class="keyword">func</span> (<label for="r187" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r188" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html" class="ident">parentWithAnyPolicy</a></label>() *<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1105"><code>	<span class="keyword">if</span> <label for="r187" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1106"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-1107"><code>	}</code></span>
+<span class="codeline" id="line-1108"><code>	<span class="keyword">return</span> <label for="r187" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r187" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>-<span class="lit-number">1</span>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
+<span class="codeline" id="line-1109"><code>}</code></span>
+<span class="codeline" id="line-1110"><code></code></span>
+<span class="codeline" id="line-1111"><code><span class="keyword">func</span> (<label for="r189" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r190" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html" class="ident">parents</a></label>() <a href="../../../pkg/iter.html" class="ident i7">iter</a>.<a href="../../iter/iter.go.html#line-223" class="ident">Seq</a>[*<a href="#line-1048" class="ident">policyGraphNode</a>] {</code></span>
+<span class="codeline" id="line-1112"><code>	<span class="keyword">if</span> <label for="r189" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a> == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1113"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
+<span class="codeline" id="line-1114"><code>	}</code></span>
+<span class="codeline" id="line-1115"><code>	<span class="keyword">return</span> <a href="../../../pkg/maps.html" class="ident i8">maps</a>.<a href="../../maps/iter.go.html#line-38" class="ident">Values</a>(<label for="r189" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r189" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>-<span class="lit-number">1</span>])</code></span>
+<span class="codeline" id="line-1116"><code>}</code></span>
+<span class="codeline" id="line-1117"><code></code></span>
+<span class="codeline" id="line-1118"><code><span class="keyword">func</span> (<label for="r191" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r192" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html" class="ident">leaves</a></label>() <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1119"><code>	<span class="keyword">return</span> <label for="r191" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r191" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>]</code></span>
+<span class="codeline" id="line-1120"><code>}</code></span>
+<span class="codeline" id="line-1121"><code></code></span>
+<span class="codeline" id="line-1122"><code><span class="keyword">func</span> (<label for="r193" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r194" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html" class="ident">leafWithPolicy</a></label>(<label for="r195" class="ident">policy</label> <a href="oid.go.html#line-23" class="ident">OID</a>) *<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1123"><code>	<span class="keyword">return</span> <label for="r193" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r193" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r195" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
+<span class="codeline" id="line-1124"><code>}</code></span>
+<span class="codeline" id="line-1125"><code></code></span>
+<span class="codeline" id="line-1126"><code><span class="keyword">func</span> (<label for="r196" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r197" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html" class="ident">deleteLeaf</a></label>(<label for="r198" class="ident">policy</label> <a href="oid.go.html#line-23" class="ident">OID</a>) {</code></span>
+<span class="codeline" id="line-1127"><code>	<label for="r199" class="ident">n</label> := <label for="r196" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r196" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>][<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r198" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)]</code></span>
+<span class="codeline" id="line-1128"><code>	<span class="keyword">if</span> <label for="r199" class="ident">n</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1129"><code>		<span class="keyword">return</span></code></span>
+<span class="codeline" id="line-1130"><code>	}</code></span>
+<span class="codeline" id="line-1131"><code>	<span class="keyword">for</span> <label for="r200" class="ident">p</label> := <span class="keyword">range</span> <label for="r199" class="ident">n</label>.<a href="#line-1053" class="ident">parents</a> {</code></span>
+<span class="codeline" id="line-1132"><code>		<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r200" class="ident">p</label>.<a href="#line-1054" class="ident">children</a>, <label for="r199" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1133"><code>	}</code></span>
+<span class="codeline" id="line-1134"><code>	<span class="keyword">for</span> <label for="r201" class="ident">c</label> := <span class="keyword">range</span> <label for="r199" class="ident">n</label>.<a href="#line-1054" class="ident">children</a> {</code></span>
+<span class="codeline" id="line-1135"><code>		<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r201" class="ident">c</label>.<a href="#line-1053" class="ident">parents</a>, <label for="r199" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1136"><code>	}</code></span>
+<span class="codeline" id="line-1137"><code>	<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r196" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r196" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>], <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r198" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>))</code></span>
+<span class="codeline" id="line-1138"><code>}</code></span>
+<span class="codeline" id="line-1139"><code></code></span>
+<span class="codeline" id="line-1140"><code><span class="keyword">func</span> (<label for="r202" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r203" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html" class="ident">validPolicyNodes</a></label>() []*<a href="#line-1048" class="ident">policyGraphNode</a> {</code></span>
+<span class="codeline" id="line-1141"><code>	<span class="keyword">var</span> <label for="r204" class="ident">validNodes</label> []*<a href="#line-1048" class="ident">policyGraphNode</a></code></span>
+<span class="codeline" id="line-1142"><code>	<span class="keyword">for</span> <label for="r205" class="ident">i</label> := <label for="r202" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>; <label for="r205" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r205" class="ident">i</label>-- {</code></span>
+<span class="codeline" id="line-1143"><code>		<span class="keyword">for</span> <label for="r206" class="ident">_</label>, <label for="r207" class="ident">n</label> := <span class="keyword">range</span> <label for="r202" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r205" class="ident">i</label>] {</code></span>
+<span class="codeline" id="line-1144"><code>			<span class="keyword">if</span> <label for="r207" class="ident">n</label>.<a href="#line-1049" class="ident">validPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>) {</code></span>
+<span class="codeline" id="line-1145"><code>				<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-1146"><code>			}</code></span>
+<span class="codeline" id="line-1147"><code></code></span>
+<span class="codeline" id="line-1148"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r207" class="ident">n</label>.<a href="#line-1053" class="ident">parents</a>) == <span class="lit-number">1</span> {</code></span>
+<span class="codeline" id="line-1149"><code>				<span class="keyword">for</span> <label for="r208" class="ident">p</label> := <span class="keyword">range</span> <label for="r207" class="ident">n</label>.<a href="#line-1053" class="ident">parents</a> {</code></span>
+<span class="codeline" id="line-1150"><code>					<span class="keyword">if</span> <label for="r208" class="ident">p</label>.<a href="#line-1049" class="ident">validPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>) {</code></span>
+<span class="codeline" id="line-1151"><code>						<label for="r204" class="ident">validNodes</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r204" class="ident">validNodes</label>, <label for="r207" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1152"><code>					}</code></span>
+<span class="codeline" id="line-1153"><code>				}</code></span>
+<span class="codeline" id="line-1154"><code>			}</code></span>
+<span class="codeline" id="line-1155"><code>		}</code></span>
+<span class="codeline" id="line-1156"><code>	}</code></span>
+<span class="codeline" id="line-1157"><code>	<span class="keyword">return</span> <label for="r204" class="ident">validNodes</label></code></span>
+<span class="codeline" id="line-1158"><code>}</code></span>
+<span class="codeline" id="line-1159"><code></code></span>
+<span class="codeline" id="line-1160"><code><span class="keyword">func</span> (<label for="r209" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r210" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.prune^6c831.html" class="ident">prune</a></label>() {</code></span>
+<span class="codeline" id="line-1161"><code>	<span class="keyword">for</span> <label for="r211" class="ident">i</label> := <label for="r209" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a> - <span class="lit-number">1</span>; <label for="r211" class="ident">i</label> &gt; <span class="lit-number">0</span>; <label for="r211" class="ident">i</label>-- {</code></span>
+<span class="codeline" id="line-1162"><code>		<span class="keyword">for</span> <label for="r212" class="ident">_</label>, <label for="r213" class="ident">n</label> := <span class="keyword">range</span> <label for="r209" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r211" class="ident">i</label>] {</code></span>
+<span class="codeline" id="line-1163"><code>			<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r213" class="ident">n</label>.<a href="#line-1054" class="ident">children</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1164"><code>				<span class="keyword">for</span> <label for="r214" class="ident">p</label> := <span class="keyword">range</span> <label for="r213" class="ident">n</label>.<a href="#line-1053" class="ident">parents</a> {</code></span>
+<span class="codeline" id="line-1165"><code>					<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r214" class="ident">p</label>.<a href="#line-1054" class="ident">children</a>, <label for="r213" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1166"><code>				}</code></span>
+<span class="codeline" id="line-1167"><code>				<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r209" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r211" class="ident">i</label>], <a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r213" class="ident">n</label>.<a href="#line-1049" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>))</code></span>
+<span class="codeline" id="line-1168"><code>			}</code></span>
+<span class="codeline" id="line-1169"><code>		}</code></span>
+<span class="codeline" id="line-1170"><code>	}</code></span>
+<span class="codeline" id="line-1171"><code>}</code></span>
+<span class="codeline" id="line-1172"><code></code></span>
+<span class="codeline" id="line-1173"><code><span class="keyword">func</span> (<label for="r215" class="ident">pg</label> *<a href="#line-1071" class="ident">policyGraph</a>) <label for="r216" class="ident"><a href="../../../use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html" class="ident">incrDepth</a></label>() {</code></span>
+<span class="codeline" id="line-1174"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1074" class="ident">parentIndex</a> = <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1048" class="ident">policyGraphNode</a>{}</code></span>
+<span class="codeline" id="line-1175"><code>	<span class="keyword">for</span> <label for="r217" class="ident">_</label>, <label for="r218" class="ident">n</label> := <span class="keyword">range</span> <label for="r215" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>[<label for="r215" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>] {</code></span>
+<span class="codeline" id="line-1176"><code>		<span class="keyword">for</span> <label for="r219" class="ident">_</label>, <label for="r220" class="ident">e</label> := <span class="keyword">range</span> <label for="r218" class="ident">n</label>.<a href="#line-1050" class="ident">expectedPolicySet</a> {</code></span>
+<span class="codeline" id="line-1177"><code>			<label for="r215" class="ident">pg</label>.<a href="#line-1074" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r220" class="ident">e</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r215" class="ident">pg</label>.<a href="#line-1074" class="ident">parentIndex</a>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r220" class="ident">e</label>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r218" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1178"><code>		}</code></span>
+<span class="codeline" id="line-1179"><code>	}</code></span>
+<span class="codeline" id="line-1180"><code></code></span>
+<span class="codeline" id="line-1181"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1075" class="ident">depth</a>++</code></span>
+<span class="codeline" id="line-1182"><code>	<label for="r215" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r215" class="ident">pg</label>.<a href="#line-1072" class="ident">strata</a>, <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]*<a href="#line-1048" class="ident">policyGraphNode</a>{})</code></span>
+<span class="codeline" id="line-1183"><code>}</code></span>
+<span class="codeline" id="line-1184"><code></code></span>
+<span class="codeline" id="line-1185"><code><span class="keyword">func</span> <label for="r221" class="ident"><a href="../../../pkg/crypto/x509.html#name-policiesValid" class="ident">policiesValid</a></label>(<label for="r222" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>, <label for="r223" class="ident">opts</label> <a href="#line-194" class="ident">VerifyOptions</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-1186"><code>	<span class="comment">// The following code implements the policy verification algorithm as</span></code></span>
+<span class="codeline" id="line-1187"><code><span class="comment">	// specified in RFC 5280 and updated by RFC 9618. In particular the</span></code></span>
+<span class="codeline" id="line-1188"><code><span class="comment">	// following sections are replaced by RFC 9618:</span></code></span>
+<span class="codeline" id="line-1189"><code><span class="comment">	//	* 6.1.2 (a)</span></code></span>
+<span class="codeline" id="line-1190"><code><span class="comment">	//	* 6.1.3 (d)</span></code></span>
+<span class="codeline" id="line-1191"><code><span class="comment">	//	* 6.1.3 (e)</span></code></span>
+<span class="codeline" id="line-1192"><code><span class="comment">	//	* 6.1.3 (f)</span></code></span>
+<span class="codeline" id="line-1193"><code><span class="comment">	//	* 6.1.4 (b)</span></code></span>
+<span class="codeline" id="line-1194"><code><span class="comment">	//	* 6.1.5 (g)</span></code></span>
+<span class="codeline" id="line-1195"><code></code></span>
+<span class="codeline" id="line-1196"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r222" class="ident">chain</label>) == <span class="lit-number">1</span> {</code></span>
+<span class="codeline" id="line-1197"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1198"><code>	}</code></span>
+<span class="codeline" id="line-1199"><code></code></span>
+<span class="codeline" id="line-1200"><code>	<span class="comment">// n is the length of the chain minus the trust anchor</span></code></span>
+<span class="codeline" id="line-1201"><code>	<label for="r224" class="ident">n</label> := <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r222" class="ident">chain</label>) - <span class="lit-number">1</span></code></span>
+<span class="codeline" id="line-1202"><code></code></span>
+<span class="codeline" id="line-1203"><code>	<label for="r225" class="ident">pg</label> := <a href="#line-1080" class="ident">newPolicyGraph</a>()</code></span>
+<span class="codeline" id="line-1204"><code>	<span class="keyword">var</span> <label for="r226" class="ident">inhibitAnyPolicy</label>, <label for="r227" class="ident">explicitPolicy</label>, <label for="r228" class="ident">policyMapping</label> <a href="../../../pkg/builtin.html#name-int" class="ident">int</a></code></span>
+<span class="codeline" id="line-1205"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-242" class="ident">inhibitAnyPolicy</a> {</code></span>
+<span class="codeline" id="line-1206"><code>		<label for="r226" class="ident">inhibitAnyPolicy</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
+<span class="codeline" id="line-1207"><code>	}</code></span>
+<span class="codeline" id="line-1208"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-238" class="ident">requireExplicitPolicy</a> {</code></span>
+<span class="codeline" id="line-1209"><code>		<label for="r227" class="ident">explicitPolicy</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
+<span class="codeline" id="line-1210"><code>	}</code></span>
+<span class="codeline" id="line-1211"><code>	<span class="keyword">if</span> !<label for="r223" class="ident">opts</label>.<a href="#line-234" class="ident">inhibitPolicyMapping</a> {</code></span>
+<span class="codeline" id="line-1212"><code>		<label for="r228" class="ident">policyMapping</label> = <label for="r224" class="ident">n</label> + <span class="lit-number">1</span></code></span>
 <span class="codeline" id="line-1213"><code>	}</code></span>
-<span class="codeline" id="line-1214"><code>	<span class="comment">// If the user does not pass any policies, we consider</span></code></span>
-<span class="codeline" id="line-1215"><code><span class="comment">	// that equivalent to passing anyPolicyOID.</span></code></span>
-<span class="codeline" id="line-1216"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r229" class="ident">initialUserPolicySet</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1217"><code>		<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1214"><code></code></span>
+<span class="codeline" id="line-1215"><code>	<label for="r229" class="ident">initialUserPolicySet</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
+<span class="codeline" id="line-1216"><code>	<span class="keyword">for</span> <label for="r230" class="ident">_</label>, <label for="r231" class="ident">p</label> := <span class="keyword">range</span> <label for="r223" class="ident">opts</label>.<a href="#line-226" class="ident">CertificatePolicies</a> {</code></span>
+<span class="codeline" id="line-1217"><code>		<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r231" class="ident">p</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
 <span class="codeline" id="line-1218"><code>	}</code></span>
-<span class="codeline" id="line-1219"><code></code></span>
-<span class="codeline" id="line-1220"><code>	<span class="keyword">for</span> <label for="r232" class="ident">i</label> := <label for="r224" class="ident">n</label> - <span class="lit-number">1</span>; <label for="r232" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r232" class="ident">i</label>-- {</code></span>
-<span class="codeline" id="line-1221"><code>		<label for="r233" class="ident">cert</label> := <label for="r222" class="ident">chain</label>[<label for="r232" class="ident">i</label>]</code></span>
-<span class="codeline" id="line-1222"><code></code></span>
-<span class="codeline" id="line-1223"><code>		<label for="r234" class="ident">isSelfSigned</label> := <a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-709" class="ident">RawIssuer</a>, <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>)</code></span>
+<span class="codeline" id="line-1219"><code>	<span class="comment">// If the user does not pass any policies, we consider</span></code></span>
+<span class="codeline" id="line-1220"><code><span class="comment">	// that equivalent to passing anyPolicyOID.</span></code></span>
+<span class="codeline" id="line-1221"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r229" class="ident">initialUserPolicySet</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1222"><code>		<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1223"><code>	}</code></span>
 <span class="codeline" id="line-1224"><code></code></span>
-<span class="codeline" id="line-1225"><code>		<span class="comment">// 6.1.3 (e) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1226"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-815" class="ident">Policies</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1227"><code>			<label for="r225" class="ident">pg</label> = <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
-<span class="codeline" id="line-1228"><code>		}</code></span>
+<span class="codeline" id="line-1225"><code>	<span class="keyword">for</span> <label for="r232" class="ident">i</label> := <label for="r224" class="ident">n</label> - <span class="lit-number">1</span>; <label for="r232" class="ident">i</label> &gt;= <span class="lit-number">0</span>; <label for="r232" class="ident">i</label>-- {</code></span>
+<span class="codeline" id="line-1226"><code>		<label for="r233" class="ident">cert</label> := <label for="r222" class="ident">chain</label>[<label for="r232" class="ident">i</label>]</code></span>
+<span class="codeline" id="line-1227"><code></code></span>
+<span class="codeline" id="line-1228"><code>		<label for="r234" class="ident">isSelfSigned</label> := <a href="../../../pkg/bytes.html" class="ident i0">bytes</a>.<a href="../../bytes/bytes.go.html#line-20" class="ident">Equal</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-709" class="ident">RawIssuer</a>, <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-708" class="ident">RawSubject</a>)</code></span>
 <span class="codeline" id="line-1229"><code></code></span>
-<span class="codeline" id="line-1230"><code>		<span class="comment">// 6.1.3 (f) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1231"><code>		<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r225" class="ident">pg</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1232"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1230"><code>		<span class="comment">// 6.1.3 (e) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1231"><code>		<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-815" class="ident">Policies</a>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1232"><code>			<label for="r225" class="ident">pg</label> = <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-1233"><code>		}</code></span>
 <span class="codeline" id="line-1234"><code></code></span>
-<span class="codeline" id="line-1235"><code>		<span class="keyword">if</span> <label for="r225" class="ident">pg</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1236"><code>			<label for="r225" class="ident">pg</label>.<a href="#line-1168" class="ident">incrDepth</a>()</code></span>
-<span class="codeline" id="line-1237"><code></code></span>
-<span class="codeline" id="line-1238"><code>			<label for="r235" class="ident">policies</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
+<span class="codeline" id="line-1235"><code>		<span class="comment">// 6.1.3 (f) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1236"><code>		<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> == <span class="lit-number">0</span> &amp;&amp; <label for="r225" class="ident">pg</label> == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1237"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1238"><code>		}</code></span>
 <span class="codeline" id="line-1239"><code></code></span>
-<span class="codeline" id="line-1240"><code>			<span class="comment">// 6.1.3 (d) (1) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1241"><code>			<span class="keyword">for</span> <label for="r236" class="ident">_</label>, <label for="r237" class="ident">policy</label> := <span class="keyword">range</span> <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-815" class="ident">Policies</a> {</code></span>
-<span class="codeline" id="line-1242"><code>				<label for="r235" class="ident">policies</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r237" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1243"><code></code></span>
-<span class="codeline" id="line-1244"><code>				<span class="keyword">if</span> <label for="r237" class="ident">policy</label>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>) {</code></span>
-<span class="codeline" id="line-1245"><code>					<span class="keyword">continue</span></code></span>
-<span class="codeline" id="line-1246"><code>				}</code></span>
-<span class="codeline" id="line-1247"><code></code></span>
-<span class="codeline" id="line-1248"><code>				<span class="comment">// 6.1.3 (d) (1) (i) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1249"><code>				<label for="r238" class="ident">parents</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1092" class="ident">parentsWithExpected</a>(<label for="r237" class="ident">policy</label>)</code></span>
-<span class="codeline" id="line-1250"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r238" class="ident">parents</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1251"><code>					<span class="comment">// 6.1.3 (d) (1) (ii) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1252"><code>					<span class="keyword">if</span> <label for="r239" class="ident">anyParent</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1099" class="ident">parentWithAnyPolicy</a>(); <label for="r239" class="ident">anyParent</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1253"><code>						<label for="r238" class="ident">parents</label> = []*<a href="#line-1043" class="ident">policyGraphNode</a>{<label for="r239" class="ident">anyParent</label>}</code></span>
-<span class="codeline" id="line-1254"><code>					}</code></span>
-<span class="codeline" id="line-1255"><code>				}</code></span>
-<span class="codeline" id="line-1256"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r238" class="ident">parents</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1257"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1088" class="ident">insert</a>(<a href="#line-1052" class="ident">newPolicyGraphNode</a>(<label for="r237" class="ident">policy</label>, <label for="r238" class="ident">parents</label>))</code></span>
-<span class="codeline" id="line-1258"><code>				}</code></span>
-<span class="codeline" id="line-1259"><code>			}</code></span>
-<span class="codeline" id="line-1260"><code></code></span>
-<span class="codeline" id="line-1261"><code>			<span class="comment">// 6.1.3 (d) (2) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1262"><code><span class="comment">			// NOTE: in the check "n-i &lt; n" our i is different from the i in the specification.</span></code></span>
-<span class="codeline" id="line-1263"><code><span class="comment">			// In the specification chains go from the trust anchor to the leaf, whereas our</span></code></span>
-<span class="codeline" id="line-1264"><code><span class="comment">			// chains go from the leaf to the trust anchor, so our i's our inverted. Our</span></code></span>
-<span class="codeline" id="line-1265"><code><span class="comment">			// check here matches the check "i &lt; n" in the specification.</span></code></span>
-<span class="codeline" id="line-1266"><code>			<span class="keyword">if</span> <label for="r235" class="ident">policies</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] &amp;&amp; (<label for="r226" class="ident">inhibitAnyPolicy</label> &gt; <span class="lit-number">0</span> || (<label for="r224" class="ident">n</label>-<label for="r232" class="ident">i</label> &lt; <label for="r224" class="ident">n</label> &amp;&amp; <label for="r234" class="ident">isSelfSigned</label>)) {</code></span>
-<span class="codeline" id="line-1267"><code>				<label for="r240" class="ident">missing</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1043" class="ident">policyGraphNode</a>{}</code></span>
-<span class="codeline" id="line-1268"><code>				<label for="r241" class="ident">leaves</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1113" class="ident">leaves</a>()</code></span>
-<span class="codeline" id="line-1269"><code>				<span class="keyword">for</span> <label for="r242" class="ident">p</label> := <span class="keyword">range</span> <label for="r225" class="ident">pg</label>.<a href="#line-1106" class="ident">parents</a>() {</code></span>
-<span class="codeline" id="line-1270"><code>					<span class="keyword">for</span> <label for="r243" class="ident">_</label>, <label for="r244" class="ident">expected</label> := <span class="keyword">range</span> <label for="r242" class="ident">p</label>.<a href="#line-1045" class="ident">expectedPolicySet</a> {</code></span>
-<span class="codeline" id="line-1271"><code>						<span class="keyword">if</span> <label for="r241" class="ident">leaves</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1272"><code>							<label for="r240" class="ident">missing</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r240" class="ident">missing</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r242" class="ident">p</label>)</code></span>
-<span class="codeline" id="line-1273"><code>						}</code></span>
-<span class="codeline" id="line-1274"><code>					}</code></span>
-<span class="codeline" id="line-1275"><code>				}</code></span>
-<span class="codeline" id="line-1276"><code></code></span>
-<span class="codeline" id="line-1277"><code>				<span class="keyword">for</span> <label for="r245" class="ident">oidStr</label>, <label for="r246" class="ident">parents</label> := <span class="keyword">range</span> <label for="r240" class="ident">missing</label> {</code></span>
-<span class="codeline" id="line-1278"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1088" class="ident">insert</a>(<a href="#line-1052" class="ident">newPolicyGraphNode</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r245" class="ident">oidStr</label>)}, <label for="r246" class="ident">parents</label>))</code></span>
-<span class="codeline" id="line-1279"><code>				}</code></span>
-<span class="codeline" id="line-1280"><code>			}</code></span>
+<span class="codeline" id="line-1240"><code>		<span class="keyword">if</span> <label for="r225" class="ident">pg</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1241"><code>			<label for="r225" class="ident">pg</label>.<a href="#line-1173" class="ident">incrDepth</a>()</code></span>
+<span class="codeline" id="line-1242"><code></code></span>
+<span class="codeline" id="line-1243"><code>			<label for="r235" class="ident">policies</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
+<span class="codeline" id="line-1244"><code></code></span>
+<span class="codeline" id="line-1245"><code>			<span class="comment">// 6.1.3 (d) (1) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1246"><code>			<span class="keyword">for</span> <label for="r236" class="ident">_</label>, <label for="r237" class="ident">policy</label> := <span class="keyword">range</span> <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-815" class="ident">Policies</a> {</code></span>
+<span class="codeline" id="line-1247"><code>				<label for="r235" class="ident">policies</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r237" class="ident">policy</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1248"><code></code></span>
+<span class="codeline" id="line-1249"><code>				<span class="keyword">if</span> <label for="r237" class="ident">policy</label>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>) {</code></span>
+<span class="codeline" id="line-1250"><code>					<span class="keyword">continue</span></code></span>
+<span class="codeline" id="line-1251"><code>				}</code></span>
+<span class="codeline" id="line-1252"><code></code></span>
+<span class="codeline" id="line-1253"><code>				<span class="comment">// 6.1.3 (d) (1) (i) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1254"><code>				<label for="r238" class="ident">parents</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1097" class="ident">parentsWithExpected</a>(<label for="r237" class="ident">policy</label>)</code></span>
+<span class="codeline" id="line-1255"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r238" class="ident">parents</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1256"><code>					<span class="comment">// 6.1.3 (d) (1) (ii) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1257"><code>					<span class="keyword">if</span> <label for="r239" class="ident">anyParent</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1104" class="ident">parentWithAnyPolicy</a>(); <label for="r239" class="ident">anyParent</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1258"><code>						<label for="r238" class="ident">parents</label> = []*<a href="#line-1048" class="ident">policyGraphNode</a>{<label for="r239" class="ident">anyParent</label>}</code></span>
+<span class="codeline" id="line-1259"><code>					}</code></span>
+<span class="codeline" id="line-1260"><code>				}</code></span>
+<span class="codeline" id="line-1261"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r238" class="ident">parents</label>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1262"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1093" class="ident">insert</a>(<a href="#line-1057" class="ident">newPolicyGraphNode</a>(<label for="r237" class="ident">policy</label>, <label for="r238" class="ident">parents</label>))</code></span>
+<span class="codeline" id="line-1263"><code>				}</code></span>
+<span class="codeline" id="line-1264"><code>			}</code></span>
+<span class="codeline" id="line-1265"><code></code></span>
+<span class="codeline" id="line-1266"><code>			<span class="comment">// 6.1.3 (d) (2) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1267"><code><span class="comment">			// NOTE: in the check "n-i &lt; n" our i is different from the i in the specification.</span></code></span>
+<span class="codeline" id="line-1268"><code><span class="comment">			// In the specification chains go from the trust anchor to the leaf, whereas our</span></code></span>
+<span class="codeline" id="line-1269"><code><span class="comment">			// chains go from the leaf to the trust anchor, so our i's our inverted. Our</span></code></span>
+<span class="codeline" id="line-1270"><code><span class="comment">			// check here matches the check "i &lt; n" in the specification.</span></code></span>
+<span class="codeline" id="line-1271"><code>			<span class="keyword">if</span> <label for="r235" class="ident">policies</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] &amp;&amp; (<label for="r226" class="ident">inhibitAnyPolicy</label> &gt; <span class="lit-number">0</span> || (<label for="r224" class="ident">n</label>-<label for="r232" class="ident">i</label> &lt; <label for="r224" class="ident">n</label> &amp;&amp; <label for="r234" class="ident">isSelfSigned</label>)) {</code></span>
+<span class="codeline" id="line-1272"><code>				<label for="r240" class="ident">missing</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]*<a href="#line-1048" class="ident">policyGraphNode</a>{}</code></span>
+<span class="codeline" id="line-1273"><code>				<label for="r241" class="ident">leaves</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1118" class="ident">leaves</a>()</code></span>
+<span class="codeline" id="line-1274"><code>				<span class="keyword">for</span> <label for="r242" class="ident">p</label> := <span class="keyword">range</span> <label for="r225" class="ident">pg</label>.<a href="#line-1111" class="ident">parents</a>() {</code></span>
+<span class="codeline" id="line-1275"><code>					<span class="keyword">for</span> <label for="r243" class="ident">_</label>, <label for="r244" class="ident">expected</label> := <span class="keyword">range</span> <label for="r242" class="ident">p</label>.<a href="#line-1050" class="ident">expectedPolicySet</a> {</code></span>
+<span class="codeline" id="line-1276"><code>						<span class="keyword">if</span> <label for="r241" class="ident">leaves</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] == <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1277"><code>							<label for="r240" class="ident">missing</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r240" class="ident">missing</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r244" class="ident">expected</label>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r242" class="ident">p</label>)</code></span>
+<span class="codeline" id="line-1278"><code>						}</code></span>
+<span class="codeline" id="line-1279"><code>					}</code></span>
+<span class="codeline" id="line-1280"><code>				}</code></span>
 <span class="codeline" id="line-1281"><code></code></span>
-<span class="codeline" id="line-1282"><code>			<span class="comment">// 6.1.3 (d) (3) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1283"><code>			<label for="r225" class="ident">pg</label>.<a href="#line-1155" class="ident">prune</a>()</code></span>
-<span class="codeline" id="line-1284"><code></code></span>
-<span class="codeline" id="line-1285"><code>			<span class="keyword">if</span> <label for="r232" class="ident">i</label> != <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1286"><code>				<span class="comment">// 6.1.4 (b) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1287"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-879" class="ident">PolicyMappings</a>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1288"><code>					<span class="comment">// collect map of issuer -&gt; []subject</span></code></span>
-<span class="codeline" id="line-1289"><code>					<label for="r247" class="ident">mappings</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]<a href="oid.go.html#line-23" class="ident">OID</a>{}</code></span>
-<span class="codeline" id="line-1290"><code></code></span>
-<span class="codeline" id="line-1291"><code>					<span class="keyword">for</span> <label for="r248" class="ident">_</label>, <label for="r249" class="ident">mapping</label> := <span class="keyword">range</span> <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-879" class="ident">PolicyMappings</a> {</code></span>
-<span class="codeline" id="line-1292"><code>						<span class="keyword">if</span> <label for="r228" class="ident">policyMapping</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1293"><code>							<span class="keyword">if</span> <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>) || <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-889" class="ident">SubjectDomainPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>) {</code></span>
-<span class="codeline" id="line-1294"><code>								<span class="comment">// Invalid mapping</span></code></span>
-<span class="codeline" id="line-1295"><code>								<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-1296"><code>							}</code></span>
-<span class="codeline" id="line-1297"><code>							<label for="r247" class="ident">mappings</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r247" class="ident">mappings</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-889" class="ident">SubjectDomainPolicy</a>)</code></span>
-<span class="codeline" id="line-1298"><code>						} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-1299"><code>							<span class="comment">// 6.1.4 (b) (3) (i) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1300"><code>							<label for="r225" class="ident">pg</label>.<a href="#line-1121" class="ident">deleteLeaf</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>)</code></span>
-<span class="codeline" id="line-1301"><code>						}</code></span>
-<span class="codeline" id="line-1302"><code>					}</code></span>
-<span class="codeline" id="line-1303"><code></code></span>
-<span class="codeline" id="line-1304"><code>					<span class="comment">// 6.1.4 (b) (3) (ii) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1305"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1155" class="ident">prune</a>()</code></span>
-<span class="codeline" id="line-1306"><code></code></span>
-<span class="codeline" id="line-1307"><code>					<span class="keyword">for</span> <label for="r250" class="ident">issuerStr</label>, <label for="r251" class="ident">subjectPolicies</label> := <span class="keyword">range</span> <label for="r247" class="ident">mappings</label> {</code></span>
-<span class="codeline" id="line-1308"><code>						<span class="comment">// 6.1.4 (b) (1) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1309"><code>						<span class="keyword">if</span> <label for="r252" class="ident">matching</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1117" class="ident">leafWithPolicy</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r250" class="ident">issuerStr</label>)}); <label for="r252" class="ident">matching</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1310"><code>							<label for="r252" class="ident">matching</label>.<a href="#line-1045" class="ident">expectedPolicySet</a> = <label for="r251" class="ident">subjectPolicies</label></code></span>
-<span class="codeline" id="line-1311"><code>						} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r253" class="ident">matching</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1117" class="ident">leafWithPolicy</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>); <label for="r253" class="ident">matching</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1312"><code>							<span class="comment">// 6.1.4 (b) (2) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1313"><code>							<label for="r254" class="ident">n</label> := <a href="#line-1052" class="ident">newPolicyGraphNode</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r250" class="ident">issuerStr</label>)}, []*<a href="#line-1043" class="ident">policyGraphNode</a>{<label for="r253" class="ident">matching</label>})</code></span>
-<span class="codeline" id="line-1314"><code>							<label for="r254" class="ident">n</label>.<a href="#line-1045" class="ident">expectedPolicySet</a> = <label for="r251" class="ident">subjectPolicies</label></code></span>
-<span class="codeline" id="line-1315"><code>							<label for="r225" class="ident">pg</label>.<a href="#line-1088" class="ident">insert</a>(<label for="r254" class="ident">n</label>)</code></span>
-<span class="codeline" id="line-1316"><code>						}</code></span>
-<span class="codeline" id="line-1317"><code>					}</code></span>
-<span class="codeline" id="line-1318"><code>				}</code></span>
-<span class="codeline" id="line-1319"><code>			}</code></span>
-<span class="codeline" id="line-1320"><code>		}</code></span>
-<span class="codeline" id="line-1321"><code></code></span>
-<span class="codeline" id="line-1322"><code>		<span class="keyword">if</span> <label for="r232" class="ident">i</label> != <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1323"><code>			<span class="comment">// 6.1.4 (h)</span></code></span>
-<span class="codeline" id="line-1324"><code>			<span class="keyword">if</span> !<label for="r234" class="ident">isSelfSigned</label> {</code></span>
-<span class="codeline" id="line-1325"><code>				<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1326"><code>					<label for="r227" class="ident">explicitPolicy</label>--</code></span>
-<span class="codeline" id="line-1327"><code>				}</code></span>
-<span class="codeline" id="line-1328"><code>				<span class="keyword">if</span> <label for="r228" class="ident">policyMapping</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1329"><code>					<label for="r228" class="ident">policyMapping</label>--</code></span>
-<span class="codeline" id="line-1330"><code>				}</code></span>
-<span class="codeline" id="line-1331"><code>				<span class="keyword">if</span> <label for="r226" class="ident">inhibitAnyPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1332"><code>					<label for="r226" class="ident">inhibitAnyPolicy</label>--</code></span>
-<span class="codeline" id="line-1333"><code>				}</code></span>
-<span class="codeline" id="line-1334"><code>			}</code></span>
-<span class="codeline" id="line-1335"><code></code></span>
-<span class="codeline" id="line-1336"><code>			<span class="comment">// 6.1.4 (i)</span></code></span>
-<span class="codeline" id="line-1337"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-876" class="ident">RequireExplicitPolicyZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a> &lt; <label for="r227" class="ident">explicitPolicy</label> {</code></span>
-<span class="codeline" id="line-1338"><code>				<label for="r227" class="ident">explicitPolicy</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a></code></span>
+<span class="codeline" id="line-1282"><code>				<span class="keyword">for</span> <label for="r245" class="ident">oidStr</label>, <label for="r246" class="ident">parents</label> := <span class="keyword">range</span> <label for="r240" class="ident">missing</label> {</code></span>
+<span class="codeline" id="line-1283"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1093" class="ident">insert</a>(<a href="#line-1057" class="ident">newPolicyGraphNode</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r245" class="ident">oidStr</label>)}, <label for="r246" class="ident">parents</label>))</code></span>
+<span class="codeline" id="line-1284"><code>				}</code></span>
+<span class="codeline" id="line-1285"><code>			}</code></span>
+<span class="codeline" id="line-1286"><code></code></span>
+<span class="codeline" id="line-1287"><code>			<span class="comment">// 6.1.3 (d) (3) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1288"><code>			<label for="r225" class="ident">pg</label>.<a href="#line-1160" class="ident">prune</a>()</code></span>
+<span class="codeline" id="line-1289"><code></code></span>
+<span class="codeline" id="line-1290"><code>			<span class="keyword">if</span> <label for="r232" class="ident">i</label> != <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1291"><code>				<span class="comment">// 6.1.4 (b) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1292"><code>				<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-879" class="ident">PolicyMappings</a>) &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1293"><code>					<span class="comment">// collect map of issuer -&gt; []subject</span></code></span>
+<span class="codeline" id="line-1294"><code>					<label for="r247" class="ident">mappings</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>][]<a href="oid.go.html#line-23" class="ident">OID</a>{}</code></span>
+<span class="codeline" id="line-1295"><code></code></span>
+<span class="codeline" id="line-1296"><code>					<span class="keyword">for</span> <label for="r248" class="ident">_</label>, <label for="r249" class="ident">mapping</label> := <span class="keyword">range</span> <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-879" class="ident">PolicyMappings</a> {</code></span>
+<span class="codeline" id="line-1297"><code>						<span class="keyword">if</span> <label for="r228" class="ident">policyMapping</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1298"><code>							<span class="keyword">if</span> <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>) || <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-889" class="ident">SubjectDomainPolicy</a>.<a href="oid.go.html#line-209" class="ident">Equal</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>) {</code></span>
+<span class="codeline" id="line-1299"><code>								<span class="comment">// Invalid mapping</span></code></span>
+<span class="codeline" id="line-1300"><code>								<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1301"><code>							}</code></span>
+<span class="codeline" id="line-1302"><code>							<label for="r247" class="ident">mappings</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r247" class="ident">mappings</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)], <label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-889" class="ident">SubjectDomainPolicy</a>)</code></span>
+<span class="codeline" id="line-1303"><code>						} <span class="keyword">else</span> {</code></span>
+<span class="codeline" id="line-1304"><code>							<span class="comment">// 6.1.4 (b) (3) (i) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1305"><code>							<label for="r225" class="ident">pg</label>.<a href="#line-1126" class="ident">deleteLeaf</a>(<label for="r249" class="ident">mapping</label>.<a href="x509.go.html#line-886" class="ident">IssuerDomainPolicy</a>)</code></span>
+<span class="codeline" id="line-1306"><code>						}</code></span>
+<span class="codeline" id="line-1307"><code>					}</code></span>
+<span class="codeline" id="line-1308"><code></code></span>
+<span class="codeline" id="line-1309"><code>					<span class="comment">// 6.1.4 (b) (3) (ii) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1310"><code>					<label for="r225" class="ident">pg</label>.<a href="#line-1160" class="ident">prune</a>()</code></span>
+<span class="codeline" id="line-1311"><code></code></span>
+<span class="codeline" id="line-1312"><code>					<span class="keyword">for</span> <label for="r250" class="ident">issuerStr</label>, <label for="r251" class="ident">subjectPolicies</label> := <span class="keyword">range</span> <label for="r247" class="ident">mappings</label> {</code></span>
+<span class="codeline" id="line-1313"><code>						<span class="comment">// 6.1.4 (b) (1) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1314"><code>						<span class="keyword">if</span> <label for="r252" class="ident">matching</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1122" class="ident">leafWithPolicy</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r250" class="ident">issuerStr</label>)}); <label for="r252" class="ident">matching</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1315"><code>							<label for="r252" class="ident">matching</label>.<a href="#line-1050" class="ident">expectedPolicySet</a> = <label for="r251" class="ident">subjectPolicies</label></code></span>
+<span class="codeline" id="line-1316"><code>						} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r253" class="ident">matching</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1122" class="ident">leafWithPolicy</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>); <label for="r253" class="ident">matching</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1317"><code>							<span class="comment">// 6.1.4 (b) (2) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1318"><code>							<label for="r254" class="ident">n</label> := <a href="#line-1057" class="ident">newPolicyGraphNode</a>(<a href="oid.go.html#line-23" class="ident">OID</a>{<a href="oid.go.html#line-24" class="ident">der</a>: []<a href="../../../pkg/builtin.html#name-byte" class="ident">byte</a>(<label for="r250" class="ident">issuerStr</label>)}, []*<a href="#line-1048" class="ident">policyGraphNode</a>{<label for="r253" class="ident">matching</label>})</code></span>
+<span class="codeline" id="line-1319"><code>							<label for="r254" class="ident">n</label>.<a href="#line-1050" class="ident">expectedPolicySet</a> = <label for="r251" class="ident">subjectPolicies</label></code></span>
+<span class="codeline" id="line-1320"><code>							<label for="r225" class="ident">pg</label>.<a href="#line-1093" class="ident">insert</a>(<label for="r254" class="ident">n</label>)</code></span>
+<span class="codeline" id="line-1321"><code>						}</code></span>
+<span class="codeline" id="line-1322"><code>					}</code></span>
+<span class="codeline" id="line-1323"><code>				}</code></span>
+<span class="codeline" id="line-1324"><code>			}</code></span>
+<span class="codeline" id="line-1325"><code>		}</code></span>
+<span class="codeline" id="line-1326"><code></code></span>
+<span class="codeline" id="line-1327"><code>		<span class="keyword">if</span> <label for="r232" class="ident">i</label> != <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1328"><code>			<span class="comment">// 6.1.4 (h)</span></code></span>
+<span class="codeline" id="line-1329"><code>			<span class="keyword">if</span> !<label for="r234" class="ident">isSelfSigned</label> {</code></span>
+<span class="codeline" id="line-1330"><code>				<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1331"><code>					<label for="r227" class="ident">explicitPolicy</label>--</code></span>
+<span class="codeline" id="line-1332"><code>				}</code></span>
+<span class="codeline" id="line-1333"><code>				<span class="keyword">if</span> <label for="r228" class="ident">policyMapping</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1334"><code>					<label for="r228" class="ident">policyMapping</label>--</code></span>
+<span class="codeline" id="line-1335"><code>				}</code></span>
+<span class="codeline" id="line-1336"><code>				<span class="keyword">if</span> <label for="r226" class="ident">inhibitAnyPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1337"><code>					<label for="r226" class="ident">inhibitAnyPolicy</label>--</code></span>
+<span class="codeline" id="line-1338"><code>				}</code></span>
 <span class="codeline" id="line-1339"><code>			}</code></span>
-<span class="codeline" id="line-1340"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-853" class="ident">InhibitPolicyMappingZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a> &lt; <label for="r228" class="ident">policyMapping</label> {</code></span>
-<span class="codeline" id="line-1341"><code>				<label for="r228" class="ident">policyMapping</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a></code></span>
-<span class="codeline" id="line-1342"><code>			}</code></span>
-<span class="codeline" id="line-1343"><code>			<span class="comment">// 6.1.4 (j)</span></code></span>
-<span class="codeline" id="line-1344"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-833" class="ident">InhibitAnyPolicyZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a> &lt; <label for="r226" class="ident">inhibitAnyPolicy</label> {</code></span>
-<span class="codeline" id="line-1345"><code>				<label for="r226" class="ident">inhibitAnyPolicy</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a></code></span>
-<span class="codeline" id="line-1346"><code>			}</code></span>
-<span class="codeline" id="line-1347"><code>		}</code></span>
-<span class="codeline" id="line-1348"><code>	}</code></span>
-<span class="codeline" id="line-1349"><code></code></span>
-<span class="codeline" id="line-1350"><code>	<span class="comment">// 6.1.5 (a)</span></code></span>
-<span class="codeline" id="line-1351"><code>	<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1352"><code>		<label for="r227" class="ident">explicitPolicy</label>--</code></span>
+<span class="codeline" id="line-1340"><code></code></span>
+<span class="codeline" id="line-1341"><code>			<span class="comment">// 6.1.4 (i)</span></code></span>
+<span class="codeline" id="line-1342"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-876" class="ident">RequireExplicitPolicyZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a> &lt; <label for="r227" class="ident">explicitPolicy</label> {</code></span>
+<span class="codeline" id="line-1343"><code>				<label for="r227" class="ident">explicitPolicy</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-872" class="ident">RequireExplicitPolicy</a></code></span>
+<span class="codeline" id="line-1344"><code>			}</code></span>
+<span class="codeline" id="line-1345"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-853" class="ident">InhibitPolicyMappingZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a> &lt; <label for="r228" class="ident">policyMapping</label> {</code></span>
+<span class="codeline" id="line-1346"><code>				<label for="r228" class="ident">policyMapping</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-849" class="ident">InhibitPolicyMapping</a></code></span>
+<span class="codeline" id="line-1347"><code>			}</code></span>
+<span class="codeline" id="line-1348"><code>			<span class="comment">// 6.1.4 (j)</span></code></span>
+<span class="codeline" id="line-1349"><code>			<span class="keyword">if</span> (<label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a> &gt; <span class="lit-number">0</span> || <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-833" class="ident">InhibitAnyPolicyZero</a>) &amp;&amp; <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a> &lt; <label for="r226" class="ident">inhibitAnyPolicy</label> {</code></span>
+<span class="codeline" id="line-1350"><code>				<label for="r226" class="ident">inhibitAnyPolicy</label> = <label for="r233" class="ident">cert</label>.<a href="x509.go.html#line-829" class="ident">InhibitAnyPolicy</a></code></span>
+<span class="codeline" id="line-1351"><code>			}</code></span>
+<span class="codeline" id="line-1352"><code>		}</code></span>
 <span class="codeline" id="line-1353"><code>	}</code></span>
 <span class="codeline" id="line-1354"><code></code></span>
-<span class="codeline" id="line-1355"><code>	<span class="comment">// 6.1.5 (b)</span></code></span>
-<span class="codeline" id="line-1356"><code>	<span class="keyword">if</span> <label for="r222" class="ident">chain</label>[<span class="lit-number">0</span>].<a href="x509.go.html#line-876" class="ident">RequireExplicitPolicyZero</a> {</code></span>
-<span class="codeline" id="line-1357"><code>		<label for="r227" class="ident">explicitPolicy</label> = <span class="lit-number">0</span></code></span>
+<span class="codeline" id="line-1355"><code>	<span class="comment">// 6.1.5 (a)</span></code></span>
+<span class="codeline" id="line-1356"><code>	<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> &gt; <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1357"><code>		<label for="r227" class="ident">explicitPolicy</label>--</code></span>
 <span class="codeline" id="line-1358"><code>	}</code></span>
 <span class="codeline" id="line-1359"><code></code></span>
-<span class="codeline" id="line-1360"><code>	<span class="comment">// 6.1.5 (g) (1) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1361"><code>	<span class="keyword">var</span> <label for="r255" class="ident">validPolicyNodeSet</label> []*<a href="#line-1043" class="ident">policyGraphNode</a></code></span>
-<span class="codeline" id="line-1362"><code>	<span class="comment">// 6.1.5 (g) (2) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1363"><code>	<span class="keyword">if</span> <label for="r225" class="ident">pg</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1364"><code>		<label for="r255" class="ident">validPolicyNodeSet</label> = <label for="r225" class="ident">pg</label>.<a href="#line-1135" class="ident">validPolicyNodes</a>()</code></span>
-<span class="codeline" id="line-1365"><code>		<span class="comment">// 6.1.5 (g) (3) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1366"><code>		<span class="keyword">if</span> <label for="r256" class="ident">currentAny</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1117" class="ident">leafWithPolicy</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>); <label for="r256" class="ident">currentAny</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-1367"><code>			<label for="r255" class="ident">validPolicyNodeSet</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r255" class="ident">validPolicyNodeSet</label>, <label for="r256" class="ident">currentAny</label>)</code></span>
-<span class="codeline" id="line-1368"><code>		}</code></span>
-<span class="codeline" id="line-1369"><code>	}</code></span>
-<span class="codeline" id="line-1370"><code></code></span>
-<span class="codeline" id="line-1371"><code>	<span class="comment">// 6.1.5 (g) (4) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1372"><code>	<label for="r257" class="ident">authorityConstrainedPolicySet</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
-<span class="codeline" id="line-1373"><code>	<span class="keyword">for</span> <label for="r258" class="ident">_</label>, <label for="r259" class="ident">n</label> := <span class="keyword">range</span> <label for="r255" class="ident">validPolicyNodeSet</label> {</code></span>
-<span class="codeline" id="line-1374"><code>		<label for="r257" class="ident">authorityConstrainedPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r259" class="ident">n</label>.<a href="#line-1044" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1375"><code>	}</code></span>
-<span class="codeline" id="line-1376"><code>	<span class="comment">// 6.1.5 (g) (5) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1377"><code>	<label for="r260" class="ident">userConstrainedPolicySet</label> := <a href="../../../pkg/maps.html" class="ident i6">maps</a>.<a href="../../maps/maps.go.html#line-50" class="ident">Clone</a>(<label for="r257" class="ident">authorityConstrainedPolicySet</label>)</code></span>
-<span class="codeline" id="line-1378"><code>	<span class="comment">// 6.1.5 (g) (6) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1379"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r229" class="ident">initialUserPolicySet</label>) != <span class="lit-number">1</span> || !<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] {</code></span>
-<span class="codeline" id="line-1380"><code>		<span class="comment">// 6.1.5 (g) (6) (i) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1381"><code>		<span class="keyword">for</span> <label for="r261" class="ident">p</label> := <span class="keyword">range</span> <label for="r260" class="ident">userConstrainedPolicySet</label> {</code></span>
-<span class="codeline" id="line-1382"><code>			<span class="keyword">if</span> !<label for="r229" class="ident">initialUserPolicySet</label>[<label for="r261" class="ident">p</label>] {</code></span>
-<span class="codeline" id="line-1383"><code>				<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r260" class="ident">userConstrainedPolicySet</label>, <label for="r261" class="ident">p</label>)</code></span>
-<span class="codeline" id="line-1384"><code>			}</code></span>
-<span class="codeline" id="line-1385"><code>		}</code></span>
-<span class="codeline" id="line-1386"><code>		<span class="comment">// 6.1.5 (g) (6) (ii) -- as updated by RFC 9618</span></code></span>
-<span class="codeline" id="line-1387"><code>		<span class="keyword">if</span> <label for="r257" class="ident">authorityConstrainedPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1073" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] {</code></span>
-<span class="codeline" id="line-1388"><code>			<span class="keyword">for</span> <label for="r262" class="ident">policy</label> := <span class="keyword">range</span> <label for="r229" class="ident">initialUserPolicySet</label> {</code></span>
-<span class="codeline" id="line-1389"><code>				<label for="r260" class="ident">userConstrainedPolicySet</label>[<label for="r262" class="ident">policy</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1390"><code>			}</code></span>
-<span class="codeline" id="line-1391"><code>		}</code></span>
-<span class="codeline" id="line-1392"><code>	}</code></span>
-<span class="codeline" id="line-1393"><code></code></span>
-<span class="codeline" id="line-1394"><code>	<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> == <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r260" class="ident">userConstrainedPolicySet</label>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1395"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
-<span class="codeline" id="line-1396"><code>	}</code></span>
-<span class="codeline" id="line-1397"><code></code></span>
-<span class="codeline" id="line-1398"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
-<span class="codeline" id="line-1399"><code>}</code></span>
+<span class="codeline" id="line-1360"><code>	<span class="comment">// 6.1.5 (b)</span></code></span>
+<span class="codeline" id="line-1361"><code>	<span class="keyword">if</span> <label for="r222" class="ident">chain</label>[<span class="lit-number">0</span>].<a href="x509.go.html#line-876" class="ident">RequireExplicitPolicyZero</a> {</code></span>
+<span class="codeline" id="line-1362"><code>		<label for="r227" class="ident">explicitPolicy</label> = <span class="lit-number">0</span></code></span>
+<span class="codeline" id="line-1363"><code>	}</code></span>
+<span class="codeline" id="line-1364"><code></code></span>
+<span class="codeline" id="line-1365"><code>	<span class="comment">// 6.1.5 (g) (1) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1366"><code>	<span class="keyword">var</span> <label for="r255" class="ident">validPolicyNodeSet</label> []*<a href="#line-1048" class="ident">policyGraphNode</a></code></span>
+<span class="codeline" id="line-1367"><code>	<span class="comment">// 6.1.5 (g) (2) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1368"><code>	<span class="keyword">if</span> <label for="r225" class="ident">pg</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1369"><code>		<label for="r255" class="ident">validPolicyNodeSet</label> = <label for="r225" class="ident">pg</label>.<a href="#line-1140" class="ident">validPolicyNodes</a>()</code></span>
+<span class="codeline" id="line-1370"><code>		<span class="comment">// 6.1.5 (g) (3) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1371"><code>		<span class="keyword">if</span> <label for="r256" class="ident">currentAny</label> := <label for="r225" class="ident">pg</label>.<a href="#line-1122" class="ident">leafWithPolicy</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>); <label for="r256" class="ident">currentAny</label> != <a href="../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1372"><code>			<label for="r255" class="ident">validPolicyNodeSet</label> = <a href="../../../pkg/builtin.html#name-append" class="ident">append</a>(<label for="r255" class="ident">validPolicyNodeSet</label>, <label for="r256" class="ident">currentAny</label>)</code></span>
+<span class="codeline" id="line-1373"><code>		}</code></span>
+<span class="codeline" id="line-1374"><code>	}</code></span>
+<span class="codeline" id="line-1375"><code></code></span>
+<span class="codeline" id="line-1376"><code>	<span class="comment">// 6.1.5 (g) (4) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1377"><code>	<label for="r257" class="ident">authorityConstrainedPolicySet</label> := <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a>{}</code></span>
+<span class="codeline" id="line-1378"><code>	<span class="keyword">for</span> <label for="r258" class="ident">_</label>, <label for="r259" class="ident">n</label> := <span class="keyword">range</span> <label for="r255" class="ident">validPolicyNodeSet</label> {</code></span>
+<span class="codeline" id="line-1379"><code>		<label for="r257" class="ident">authorityConstrainedPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<label for="r259" class="ident">n</label>.<a href="#line-1049" class="ident">validPolicy</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1380"><code>	}</code></span>
+<span class="codeline" id="line-1381"><code>	<span class="comment">// 6.1.5 (g) (5) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1382"><code>	<label for="r260" class="ident">userConstrainedPolicySet</label> := <a href="../../../pkg/maps.html" class="ident i8">maps</a>.<a href="../../maps/maps.go.html#line-50" class="ident">Clone</a>(<label for="r257" class="ident">authorityConstrainedPolicySet</label>)</code></span>
+<span class="codeline" id="line-1383"><code>	<span class="comment">// 6.1.5 (g) (6) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1384"><code>	<span class="keyword">if</span> <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r229" class="ident">initialUserPolicySet</label>) != <span class="lit-number">1</span> || !<label for="r229" class="ident">initialUserPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] {</code></span>
+<span class="codeline" id="line-1385"><code>		<span class="comment">// 6.1.5 (g) (6) (i) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1386"><code>		<span class="keyword">for</span> <label for="r261" class="ident">p</label> := <span class="keyword">range</span> <label for="r260" class="ident">userConstrainedPolicySet</label> {</code></span>
+<span class="codeline" id="line-1387"><code>			<span class="keyword">if</span> !<label for="r229" class="ident">initialUserPolicySet</label>[<label for="r261" class="ident">p</label>] {</code></span>
+<span class="codeline" id="line-1388"><code>				<a href="../../../pkg/builtin.html#name-delete" class="ident">delete</a>(<label for="r260" class="ident">userConstrainedPolicySet</label>, <label for="r261" class="ident">p</label>)</code></span>
+<span class="codeline" id="line-1389"><code>			}</code></span>
+<span class="codeline" id="line-1390"><code>		}</code></span>
+<span class="codeline" id="line-1391"><code>		<span class="comment">// 6.1.5 (g) (6) (ii) -- as updated by RFC 9618</span></code></span>
+<span class="codeline" id="line-1392"><code>		<span class="keyword">if</span> <label for="r257" class="ident">authorityConstrainedPolicySet</label>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>(<a href="#line-1078" class="ident">anyPolicyOID</a>.<a href="oid.go.html#line-24" class="ident">der</a>)] {</code></span>
+<span class="codeline" id="line-1393"><code>			<span class="keyword">for</span> <label for="r262" class="ident">policy</label> := <span class="keyword">range</span> <label for="r229" class="ident">initialUserPolicySet</label> {</code></span>
+<span class="codeline" id="line-1394"><code>				<label for="r260" class="ident">userConstrainedPolicySet</label>[<label for="r262" class="ident">policy</label>] = <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1395"><code>			}</code></span>
+<span class="codeline" id="line-1396"><code>		}</code></span>
+<span class="codeline" id="line-1397"><code>	}</code></span>
+<span class="codeline" id="line-1398"><code></code></span>
+<span class="codeline" id="line-1399"><code>	<span class="keyword">if</span> <label for="r227" class="ident">explicitPolicy</label> == <span class="lit-number">0</span> &amp;&amp; <a href="../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r260" class="ident">userConstrainedPolicySet</label>) == <span class="lit-number">0</span> {</code></span>
+<span class="codeline" id="line-1400"><code>		<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1401"><code>	}</code></span>
+<span class="codeline" id="line-1402"><code></code></span>
+<span class="codeline" id="line-1403"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1404"><code>}</code></span>
+<span class="codeline" id="line-1405"><code></code></span>
+<span class="codeline" id="line-1406"><code><span class="comment">// distrustedSPKIHashes contains hashes of SPKIs from certificates which</span></code></span>
+<span class="codeline" id="line-1407"><code><span class="comment">// we don't consider to be trustworthy. We use these hashes to filter out</span></code></span>
+<span class="codeline" id="line-1408"><code><span class="comment">// chains returned by Verify</span></code></span>
+<span class="codeline" id="line-1409"><code><span class="keyword">var</span> <a href="../../../pkg/crypto/x509.html#name-distrustedSPKIHashes" class="ident">distrustedSPKIHashes</a> = <span class="keyword">map</span>[<a href="../../../pkg/builtin.html#name-string" class="ident">string</a>]<span class="keyword">struct</span>{}{</code></span>
+<span class="codeline" id="line-1410"><code>	<span class="lit-string">"ebed6475c2c2d80fcb199f3fe8dd6e6b3ce60b77eb15d4e42c3dec0c6f5b5105"</span>: {},</code></span>
+<span class="codeline" id="line-1411"><code>	<span class="lit-string">"49dd353dc2b919a3770645117d0e60c16115e7d1bc259eefe734b00ea434fe5f"</span>: {},</code></span>
+<span class="codeline" id="line-1412"><code>	<span class="lit-string">"e0254c7fcdc265e2f0f8a428dabb75ab4ae039b4872d62f5ee57f0877d5a8a41"</span>: {},</code></span>
+<span class="codeline" id="line-1413"><code>	<span class="lit-string">"5c0660a2b164910d8ff589c18e14552e9e0ec237dcefe2cb736d41a4811f81a0"</span>: {},</code></span>
+<span class="codeline" id="line-1414"><code>	<span class="lit-string">"43bffa19d6ef651451f6841e019931e96f6f2eaeff28ab4b6f1ce4576de2717b"</span>: {},</code></span>
+<span class="codeline" id="line-1415"><code>	<span class="lit-string">"63ecefee431d49523bc1136c4e72d0206a477086caf606cd5cf025686c109cf8"</span>: {},</code></span>
+<span class="codeline" id="line-1416"><code>	<span class="lit-string">"ec4ffa1ad0ac88081314b7aaffef6a91f97cd57291bb5ba686c5415f5eb4f6b6"</span>: {},</code></span>
+<span class="codeline" id="line-1417"><code>	<span class="lit-string">"92c063d67e8f14db71d288e11266ffdaf69cbf115f7bab14f3bc2f68d25e0e30"</span>: {},</code></span>
+<span class="codeline" id="line-1418"><code>}</code></span>
+<span class="codeline" id="line-1419"><code></code></span>
+<span class="codeline" id="line-1420"><code><span class="comment">// containsDistrustedSPKIHash checks if any of the certificates in the chain</span></code></span>
+<span class="codeline" id="line-1421"><code><span class="comment">// have an SPKI whose hash is present in the distrustedSPKIHashes map.</span></code></span>
+<span class="codeline" id="line-1422"><code><span class="keyword">func</span> <label for="r263" class="ident"><a href="../../../pkg/crypto/x509.html#name-containsDistrustedSPKIHash" class="ident">containsDistrustedSPKIHash</a></label>(<label for="r264" class="ident">chain</label> []*<a href="x509.go.html#line-704" class="ident">Certificate</a>) <a href="../../../pkg/builtin.html#name-bool" class="ident">bool</a> {</code></span>
+<span class="codeline" id="line-1423"><code>	<span class="keyword">for</span> <label for="r265" class="ident">_</label>, <label for="r266" class="ident">c</label> := <span class="keyword">range</span> <label for="r264" class="ident">chain</label> {</code></span>
+<span class="codeline" id="line-1424"><code>		<label for="r267" class="ident">h</label> := <a href="../../../pkg/crypto/sha256.html" class="ident i2">sha256</a>.<a href="../sha256/sha256.go.html#line-53" class="ident">Sum256</a>(<label for="r266" class="ident">c</label>.<a href="x509.go.html#line-707" class="ident">RawSubjectPublicKeyInfo</a>)</code></span>
+<span class="codeline" id="line-1425"><code>		<span class="keyword">if</span> <label for="r268" class="ident">_</label>, <label for="r269" class="ident">ok</label> := <a href="#line-1409" class="ident">distrustedSPKIHashes</a>[<a href="../../../pkg/encoding/hex.html" class="ident i4">hex</a>.<a href="../../encoding/hex/hex.go.html#line-126" class="ident">EncodeToString</a>(<label for="r267" class="ident">h</label>[:])]; <label for="r269" class="ident">ok</label> {</code></span>
+<span class="codeline" id="line-1426"><code>			<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-true" class="ident">true</a></code></span>
+<span class="codeline" id="line-1427"><code>		}</code></span>
+<span class="codeline" id="line-1428"><code>	}</code></span>
+<span class="codeline" id="line-1429"><code>	<span class="keyword">return</span> <a href="../../../pkg/builtin.html#name-false" class="ident">false</a></code></span>
+<span class="codeline" id="line-1430"><code>}</code></span>
 </pre><pre id="footer">
 <table><tr><td><img src="../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/src/github.com/refraction-networking/utls/common.go.html b/src/github.com/refraction-networking/utls/common.go.html
index 14baefc91ab..d59ae407dc8 100644
--- a/src/github.com/refraction-networking/utls/common.go.html
+++ b/src/github.com/refraction-networking/utls/common.go.html
@@ -1864,7 +1864,7 @@
 <span class="codeline" id="line-1386"><code>		<span class="keyword">if</span> <label for="r110" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1387"><code>			<span class="keyword">return</span> <a href="../../../../pkg/fmt.html" class="ident i12">fmt</a>.<a href="../../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"failed to parse certificate: %w"</span>, <label for="r110" class="ident">err</label>)</code></span>
 <span class="codeline" id="line-1388"><code>		}</code></span>
-<span class="codeline" id="line-1389"><code>		<span class="keyword">if</span> <label for="r111" class="ident">err</label> := <label for="r109" class="ident">x509Cert</label>.<a href="../../../crypto/x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r103" class="ident">chi</label>.<a href="#line-432" class="ident">ServerName</a>); <label for="r111" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-1389"><code>		<span class="keyword">if</span> <label for="r111" class="ident">err</label> := <label for="r109" class="ident">x509Cert</label>.<a href="../../../crypto/x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r103" class="ident">chi</label>.<a href="#line-432" class="ident">ServerName</a>); <label for="r111" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1390"><code>			<span class="keyword">return</span> <a href="../../../../pkg/fmt.html" class="ident i12">fmt</a>.<a href="../../../fmt/errors.go.html#line-23" class="ident">Errorf</a>(<span class="lit-string">"certificate is not valid for requested server name: %w"</span>, <label for="r111" class="ident">err</label>)</code></span>
 <span class="codeline" id="line-1391"><code>		}</code></span>
 <span class="codeline" id="line-1392"><code>	}</code></span>
diff --git a/src/github.com/refraction-networking/utls/conn.go.html b/src/github.com/refraction-networking/utls/conn.go.html
index 0e68d365d57..80cce079b25 100644
--- a/src/github.com/refraction-networking/utls/conn.go.html
+++ b/src/github.com/refraction-networking/utls/conn.go.html
@@ -2383,7 +2383,7 @@
 <span class="codeline" id="line-1697"><code>	<span class="keyword">if</span> <a href="../../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r316" class="ident">c</label>.<a href="#line-61" class="ident">verifiedChains</a>) == <span class="lit-number">0</span> {</code></span>
 <span class="codeline" id="line-1698"><code>		<span class="keyword">return</span> <a href="../../../../pkg/errors.html" class="ident i5">errors</a>.<a href="../../../errors/errors.go.html#line-64" class="ident">New</a>(<span class="lit-string">"tls: handshake did not verify certificate chain"</span>)</code></span>
 <span class="codeline" id="line-1699"><code>	}</code></span>
-<span class="codeline" id="line-1700"><code>	<span class="keyword">return</span> <label for="r316" class="ident">c</label>.<a href="#line-55" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r318" class="ident">host</label>)</code></span>
+<span class="codeline" id="line-1700"><code>	<span class="keyword">return</span> <label for="r316" class="ident">c</label>.<a href="#line-55" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r318" class="ident">host</label>)</code></span>
 <span class="codeline" id="line-1701"><code>}</code></span>
 </pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
diff --git a/src/github.com/refraction-networking/utls/handshake_client.go.html b/src/github.com/refraction-networking/utls/handshake_client.go.html
index 968c5ecfee7..133a70ac2d9 100644
--- a/src/github.com/refraction-networking/utls/handshake_client.go.html
+++ b/src/github.com/refraction-networking/utls/handshake_client.go.html
@@ -1092,7 +1092,7 @@
 <span class="codeline" id="line-472"><code>			<label for="r78" class="ident">dnsName</label> = <label for="r64" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a></code></span>
 <span class="codeline" id="line-473"><code>		}</code></span>
 <span class="codeline" id="line-474"><code>		<span class="keyword">if</span> <a href="../../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r78" class="ident">dnsName</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-475"><code>			<span class="keyword">if</span> <label for="r79" class="ident">err</label> := <label for="r67" class="ident">session</label>.<a href="ticket.go.html#line-89" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-936" class="ident">VerifyHostname</a>(<label for="r78" class="ident">dnsName</label>); <label for="r79" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
+<span class="codeline" id="line-475"><code>			<span class="keyword">if</span> <label for="r79" class="ident">err</label> := <label for="r67" class="ident">session</label>.<a href="ticket.go.html#line-89" class="ident">peerCertificates</a>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-941" class="ident">VerifyHostname</a>(<label for="r78" class="ident">dnsName</label>); <label for="r79" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-476"><code>				<span class="keyword">return</span> <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a>, <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a></code></span>
 <span class="codeline" id="line-477"><code>			}</code></span>
 <span class="codeline" id="line-478"><code>		}</code></span>
@@ -1767,29 +1767,29 @@
 <span class="codeline" id="line-1147"><code>				<span class="keyword">return</span> <label for="r231" class="ident">err</label></code></span>
 <span class="codeline" id="line-1148"><code>			}</code></span>
 <span class="codeline" id="line-1149"><code>		} <span class="keyword">else</span> {</code></span>
-<span class="codeline" id="line-1150"><code>			<label for="r232" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-1151"><code>				<a href="../../../crypto/x509/verify.go.html#line-203" class="ident">Roots</a>:       <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-662" class="ident">RootCAs</a>,</code></span>
-<span class="codeline" id="line-1152"><code>				<a href="../../../crypto/x509/verify.go.html#line-207" class="ident">CurrentTime</a>: <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-1150"><code>			<label for="r232" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-1151"><code>				<a href="../../../crypto/x509/verify.go.html#line-205" class="ident">Roots</a>:       <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-662" class="ident">RootCAs</a>,</code></span>
+<span class="codeline" id="line-1152"><code>				<a href="../../../crypto/x509/verify.go.html#line-209" class="ident">CurrentTime</a>: <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
 <span class="codeline" id="line-1153"><code>				<span class="comment">// DNSName:       c.serverName, // [uTLS]</span></code></span>
-<span class="codeline" id="line-1154"><code>				<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-1154"><code>				<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
 <span class="codeline" id="line-1155"><code>			}</code></span>
 <span class="codeline" id="line-1156"><code></code></span>
 <span class="codeline" id="line-1157"><code>			<span class="comment">// [UTLS SECTION START]</span></code></span>
 <span class="codeline" id="line-1158"><code>			<span class="keyword">if</span> <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-704" class="ident">InsecureSkipTimeVerify</a> {</code></span>
-<span class="codeline" id="line-1159"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-207" class="ident">CurrentTime</a> = <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/x509.go.html#line-721" class="ident">NotAfter</a></code></span>
+<span class="codeline" id="line-1159"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-209" class="ident">CurrentTime</a> = <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/x509.go.html#line-721" class="ident">NotAfter</a></code></span>
 <span class="codeline" id="line-1160"><code>			}</code></span>
 <span class="codeline" id="line-1161"><code></code></span>
 <span class="codeline" id="line-1162"><code>			<span class="keyword">if</span> <a href="../../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1163"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-195" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-680" class="ident">ServerName</a></code></span>
+<span class="codeline" id="line-1163"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-197" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-680" class="ident">ServerName</a></code></span>
 <span class="codeline" id="line-1164"><code>			} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a> != <span class="lit-string">"*"</span> {</code></span>
-<span class="codeline" id="line-1165"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-195" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a></code></span>
+<span class="codeline" id="line-1165"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-197" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a></code></span>
 <span class="codeline" id="line-1166"><code>			}</code></span>
 <span class="codeline" id="line-1167"><code>			<span class="comment">// [UTLS SECTION END]</span></code></span>
 <span class="codeline" id="line-1168"><code></code></span>
 <span class="codeline" id="line-1169"><code>			<span class="keyword">for</span> <label for="r233" class="ident">_</label>, <label for="r234" class="ident">cert</label> := <span class="keyword">range</span> <label for="r222" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-1170"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r234" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-1170"><code>				<label for="r232" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r234" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-1171"><code>			}</code></span>
-<span class="codeline" id="line-1172"><code>			<label for="r235" class="ident">chains</label>, <label for="r236" class="ident">err</label> := <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r232" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-1172"><code>			<label for="r235" class="ident">chains</label>, <label for="r236" class="ident">err</label> := <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r232" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-1173"><code>			<span class="keyword">if</span> <label for="r236" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1174"><code>				<label for="r218" class="ident">c</label>.<a href="conn.go.html#line-860" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
 <span class="codeline" id="line-1175"><code>				<span class="keyword">return</span> &amp;<a href="common.go.html#line-1754" class="ident">CertificateVerificationError</a>{<a href="common.go.html#line-1756" class="ident">UnverifiedCertificates</a>: <label for="r222" class="ident">certs</label>, <a href="common.go.html#line-1757" class="ident">Err</a>: <label for="r236" class="ident">err</label>}</code></span>
@@ -1803,28 +1803,28 @@
 <span class="codeline" id="line-1183"><code>		}</code></span>
 <span class="codeline" id="line-1184"><code>	} <span class="keyword">else</span> <span class="keyword">if</span> !<label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-697" class="ident">InsecureSkipVerify</a> {</code></span>
 <span class="codeline" id="line-1185"><code>		<span class="comment">// [UTLS SECTION START]</span></code></span>
-<span class="codeline" id="line-1186"><code>		<label for="r237" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-1187"><code>			<a href="../../../crypto/x509/verify.go.html#line-203" class="ident">Roots</a>:       <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-662" class="ident">RootCAs</a>,</code></span>
-<span class="codeline" id="line-1188"><code>			<a href="../../../crypto/x509/verify.go.html#line-207" class="ident">CurrentTime</a>: <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-1186"><code>		<label for="r237" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-1187"><code>			<a href="../../../crypto/x509/verify.go.html#line-205" class="ident">Roots</a>:       <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-662" class="ident">RootCAs</a>,</code></span>
+<span class="codeline" id="line-1188"><code>			<a href="../../../crypto/x509/verify.go.html#line-209" class="ident">CurrentTime</a>: <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
 <span class="codeline" id="line-1189"><code>			<span class="comment">// DNSName:       c.serverName, // [uTLS]</span></code></span>
-<span class="codeline" id="line-1190"><code>			<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-1190"><code>			<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i8">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
 <span class="codeline" id="line-1191"><code>		}</code></span>
 <span class="codeline" id="line-1192"><code></code></span>
 <span class="codeline" id="line-1193"><code>		<span class="keyword">if</span> <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-704" class="ident">InsecureSkipTimeVerify</a> {</code></span>
-<span class="codeline" id="line-1194"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-207" class="ident">CurrentTime</a> = <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/x509.go.html#line-721" class="ident">NotAfter</a></code></span>
+<span class="codeline" id="line-1194"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-209" class="ident">CurrentTime</a> = <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/x509.go.html#line-721" class="ident">NotAfter</a></code></span>
 <span class="codeline" id="line-1195"><code>		}</code></span>
 <span class="codeline" id="line-1196"><code></code></span>
 <span class="codeline" id="line-1197"><code>		<span class="keyword">if</span> <a href="../../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a>) == <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-1198"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-195" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-680" class="ident">ServerName</a></code></span>
+<span class="codeline" id="line-1198"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-197" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-680" class="ident">ServerName</a></code></span>
 <span class="codeline" id="line-1199"><code>		} <span class="keyword">else</span> <span class="keyword">if</span> <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a> != <span class="lit-string">"*"</span> {</code></span>
-<span class="codeline" id="line-1200"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-195" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a></code></span>
+<span class="codeline" id="line-1200"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-197" class="ident">DNSName</a> = <label for="r218" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-720" class="ident">InsecureServerNameToVerify</a></code></span>
 <span class="codeline" id="line-1201"><code>		}</code></span>
 <span class="codeline" id="line-1202"><code>		<span class="comment">// [UTLS SECTION END]</span></code></span>
 <span class="codeline" id="line-1203"><code></code></span>
 <span class="codeline" id="line-1204"><code>		<span class="keyword">for</span> <label for="r238" class="ident">_</label>, <label for="r239" class="ident">cert</label> := <span class="keyword">range</span> <label for="r222" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-1205"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r239" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-1205"><code>			<label for="r237" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r239" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-1206"><code>		}</code></span>
-<span class="codeline" id="line-1207"><code>		<label for="r240" class="ident">chains</label>, <label for="r241" class="ident">err</label> := <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r237" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-1207"><code>		<label for="r240" class="ident">chains</label>, <label for="r241" class="ident">err</label> := <label for="r222" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r237" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-1208"><code>		<span class="keyword">if</span> <label for="r241" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
 <span class="codeline" id="line-1209"><code>			<label for="r218" class="ident">c</label>.<a href="conn.go.html#line-860" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
 <span class="codeline" id="line-1210"><code>			<span class="keyword">return</span> &amp;<a href="common.go.html#line-1754" class="ident">CertificateVerificationError</a>{<a href="common.go.html#line-1756" class="ident">UnverifiedCertificates</a>: <label for="r222" class="ident">certs</label>, <a href="common.go.html#line-1757" class="ident">Err</a>: <label for="r241" class="ident">err</label>}</code></span>
diff --git a/src/github.com/refraction-networking/utls/handshake_server.go.html b/src/github.com/refraction-networking/utls/handshake_server.go.html
index cfcc83a3459..258521d38d2 100644
--- a/src/github.com/refraction-networking/utls/handshake_server.go.html
+++ b/src/github.com/refraction-networking/utls/handshake_server.go.html
@@ -1421,23 +1421,23 @@
 <span class="codeline" id="line-933"><code>	}</code></span>
 <span class="codeline" id="line-934"><code></code></span>
 <span class="codeline" id="line-935"><code>	<span class="keyword">if</span> <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-684" class="ident">ClientAuth</a> &gt;= <a href="common.go.html#line-356" class="ident">VerifyClientCertIfGiven</a> &amp;&amp; <a href="../../../../pkg/builtin.html#name-len" class="ident">len</a>(<label for="r201" class="ident">certs</label>) &gt; <span class="lit-number">0</span> {</code></span>
-<span class="codeline" id="line-936"><code>		<label for="r208" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-192" class="ident">VerifyOptions</a>{</code></span>
-<span class="codeline" id="line-937"><code>			<a href="../../../crypto/x509/verify.go.html#line-203" class="ident">Roots</a>:         <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-689" class="ident">ClientCAs</a>,</code></span>
-<span class="codeline" id="line-938"><code>			<a href="../../../crypto/x509/verify.go.html#line-207" class="ident">CurrentTime</a>:   <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
-<span class="codeline" id="line-939"><code>			<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
-<span class="codeline" id="line-940"><code>			<a href="../../../crypto/x509/verify.go.html#line-212" class="ident">KeyUsages</a>:     []<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
+<span class="codeline" id="line-936"><code>		<label for="r208" class="ident">opts</label> := <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-194" class="ident">VerifyOptions</a>{</code></span>
+<span class="codeline" id="line-937"><code>			<a href="../../../crypto/x509/verify.go.html#line-205" class="ident">Roots</a>:         <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-689" class="ident">ClientCAs</a>,</code></span>
+<span class="codeline" id="line-938"><code>			<a href="../../../crypto/x509/verify.go.html#line-209" class="ident">CurrentTime</a>:   <label for="r197" class="ident">c</label>.<a href="conn.go.html#line-43" class="ident">config</a>.<a href="common.go.html#line-1160" class="ident">time</a>(),</code></span>
+<span class="codeline" id="line-939"><code>			<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>: <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-64" class="ident">NewCertPool</a>(),</code></span>
+<span class="codeline" id="line-940"><code>			<a href="../../../crypto/x509/verify.go.html#line-214" class="ident">KeyUsages</a>:     []<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/x509.go.html#line-632" class="ident">ExtKeyUsage</a>{<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/x509.go.html#line-637" class="ident">ExtKeyUsageClientAuth</a>},</code></span>
 <span class="codeline" id="line-941"><code>		}</code></span>
 <span class="codeline" id="line-942"><code></code></span>
 <span class="codeline" id="line-943"><code>		<span class="keyword">for</span> <label for="r209" class="ident">_</label>, <label for="r210" class="ident">cert</label> := <span class="keyword">range</span> <label for="r201" class="ident">certs</label>[<span class="lit-number">1</span>:] {</code></span>
-<span class="codeline" id="line-944"><code>			<label for="r208" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-200" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r210" class="ident">cert</label>)</code></span>
+<span class="codeline" id="line-944"><code>			<label for="r208" class="ident">opts</label>.<a href="../../../crypto/x509/verify.go.html#line-202" class="ident">Intermediates</a>.<a href="../../../crypto/x509/cert_pool.go.html#line-180" class="ident">AddCert</a>(<label for="r210" class="ident">cert</label>)</code></span>
 <span class="codeline" id="line-945"><code>		}</code></span>
 <span class="codeline" id="line-946"><code></code></span>
-<span class="codeline" id="line-947"><code>		<label for="r211" class="ident">chains</label>, <label for="r212" class="ident">err</label> := <label for="r201" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-542" class="ident">Verify</a>(<label for="r208" class="ident">opts</label>)</code></span>
+<span class="codeline" id="line-947"><code>		<label for="r211" class="ident">chains</label>, <label for="r212" class="ident">err</label> := <label for="r201" class="ident">certs</label>[<span class="lit-number">0</span>].<a href="../../../crypto/x509/verify.go.html#line-544" class="ident">Verify</a>(<label for="r208" class="ident">opts</label>)</code></span>
 <span class="codeline" id="line-948"><code>		<span class="keyword">if</span> <label for="r212" class="ident">err</label> != <a href="../../../../pkg/builtin.html#name-nil" class="ident">nil</a> {</code></span>
-<span class="codeline" id="line-949"><code>			<span class="keyword">var</span> <label for="r213" class="ident">errCertificateInvalid</label> <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-66" class="ident">CertificateInvalidError</a></code></span>
-<span class="codeline" id="line-950"><code>			<span class="keyword">if</span> <a href="../../../../pkg/errors.html" class="ident i7">errors</a>.<a href="../../../errors/wrap.go.html#line-102" class="ident">As</a>(<label for="r212" class="ident">err</label>, &amp;<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-146" class="ident">UnknownAuthorityError</a>{}) {</code></span>
+<span class="codeline" id="line-949"><code>			<span class="keyword">var</span> <label for="r213" class="ident">errCertificateInvalid</label> <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-68" class="ident">CertificateInvalidError</a></code></span>
+<span class="codeline" id="line-950"><code>			<span class="keyword">if</span> <a href="../../../../pkg/errors.html" class="ident i7">errors</a>.<a href="../../../errors/wrap.go.html#line-102" class="ident">As</a>(<label for="r212" class="ident">err</label>, &amp;<a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-148" class="ident">UnknownAuthorityError</a>{}) {</code></span>
 <span class="codeline" id="line-951"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-860" class="ident">sendAlert</a>(<a href="alert.go.html#line-41" class="ident">alertUnknownCA</a>)</code></span>
-<span class="codeline" id="line-952"><code>			} <span class="keyword">else</span> <span class="keyword">if</span> <a href="../../../../pkg/errors.html" class="ident i7">errors</a>.<a href="../../../errors/wrap.go.html#line-102" class="ident">As</a>(<label for="r212" class="ident">err</label>, &amp;<label for="r213" class="ident">errCertificateInvalid</label>) &amp;&amp; <label for="r213" class="ident">errCertificateInvalid</label>.<a href="../../../crypto/x509/verify.go.html#line-68" class="ident">Reason</a> == <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-31" class="ident">Expired</a> {</code></span>
+<span class="codeline" id="line-952"><code>			} <span class="keyword">else</span> <span class="keyword">if</span> <a href="../../../../pkg/errors.html" class="ident i7">errors</a>.<a href="../../../errors/wrap.go.html#line-102" class="ident">As</a>(<label for="r212" class="ident">err</label>, &amp;<label for="r213" class="ident">errCertificateInvalid</label>) &amp;&amp; <label for="r213" class="ident">errCertificateInvalid</label>.<a href="../../../crypto/x509/verify.go.html#line-70" class="ident">Reason</a> == <a href="../../../../pkg/crypto/x509.html" class="ident i6">x509</a>.<a href="../../../crypto/x509/verify.go.html#line-33" class="ident">Expired</a> {</code></span>
 <span class="codeline" id="line-953"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-860" class="ident">sendAlert</a>(<a href="alert.go.html#line-38" class="ident">alertCertificateExpired</a>)</code></span>
 <span class="codeline" id="line-954"><code>			} <span class="keyword">else</span> {</code></span>
 <span class="codeline" id="line-955"><code>				<label for="r197" class="ident">c</label>.<a href="conn.go.html#line-860" class="ident">sendAlert</a>(<a href="alert.go.html#line-35" class="ident">alertBadCertificate</a>)</code></span>
diff --git a/src/net/cgo_linux.go.html b/src/net/cgo_linux.go.html
index 6e3660580a2..c64f5b8690c 100644
--- a/src/net/cgo_linux.go.html
+++ b/src/net/cgo_linux.go.html
@@ -24,7 +24,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/net/cgo_linux.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/net/cgo_linux.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2011 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/src/net/cgo_resnew.go.html b/src/net/cgo_resnew.go.html
index d46a350c827..8888d4aaade 100644
--- a/src/net/cgo_resnew.go.html
+++ b/src/net/cgo_resnew.go.html
@@ -38,7 +38,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/net/cgo_resnew.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/net/cgo_resnew.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2015 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/src/net/cgo_socknew.go.html b/src/net/cgo_socknew.go.html
index fa1a0f5edc8..031dc40d3de 100644
--- a/src/net/cgo_socknew.go.html
+++ b/src/net/cgo_socknew.go.html
@@ -42,7 +42,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/net/cgo_socknew.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/net/cgo_socknew.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2015 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/src/net/cgo_unix_cgo.go.html b/src/net/cgo_unix_cgo.go.html
index 43c832d36e7..59f902d7c53 100644
--- a/src/net/cgo_unix_cgo.go.html
+++ b/src/net/cgo_unix_cgo.go.html
@@ -92,7 +92,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/net/cgo_unix_cgo.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/net/cgo_unix_cgo.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2022 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/src/net/cgo_unix_cgo_res.go.html b/src/net/cgo_unix_cgo_res.go.html
index 1d0813ab473..2df48f4157f 100644
--- a/src/net/cgo_unix_cgo_res.go.html
+++ b/src/net/cgo_unix_cgo_res.go.html
@@ -48,7 +48,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/net/cgo_unix_cgo_res.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/net/cgo_unix_cgo_res.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2022 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/src/runtime/cgo/cgo.go.html b/src/runtime/cgo/cgo.go.html
index 3251ed5ef07..4eadf05565e 100644
--- a/src/runtime/cgo/cgo.go.html
+++ b/src/runtime/cgo/cgo.go.html
@@ -26,7 +26,7 @@
 <pre class="line-numbers">
 <span class="codeline" id="line-1"><code><span class="comment">// Code generated by cmd/cgo; DO NOT EDIT.</span></code></span>
 <span class="codeline" id="line-2"><code></code></span>
-<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.9/x64/src/runtime/cgo/cgo.go:1:1</span></code></span>
+<span class="codeline" id="line-3"><code><span class="comment">//line /opt/hostedtoolcache/go/1.26.10/x64/src/runtime/cgo/cgo.go:1:1</span></code></span>
 <span class="codeline" id="line-4"><code><span class="comment">// Copyright 2010 The Go Authors. All rights reserved.</span></code></span>
 <span class="codeline" id="line-5"><code><span class="comment">// Use of this source code is governed by a BSD-style</span></code></span>
 <span class="codeline" id="line-6"><code><span class="comment">// license that can be found in the LICENSE file.</span></code></span>
diff --git a/statistics.html b/statistics.html
index 0d52e9b985f..7017642640d 100644
--- a/statistics.html
+++ b/statistics.html
@@ -13,7 +13,7 @@
 <pre><code><span class="title">Packages</span></code>
 	Total <a href="index.html">306 packages</a>, 196 of them are standard packages.
 	Total 4900 source files, 4810 of them are Go source files.
-	Total 1596040 lines of Go code.
+	Total 1596071 lines of Go code.
 	Averagely,
 	- each Go source file imports 7.19 packages and contains 332 lines of code.
 	- each package depends 6.70 other packages and contains 15.72 source files.
@@ -60,15 +60,15 @@
 <rect x="112" y="237" width="0.54" height="12" fill="#000" />
 <text xml:space="preserve" text-anchor="end" font-family='"Courier New", Courier, monospace' font-size="12" x="109" y="246" fill="#000">12</text>
 <text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="115.54" y="246" fill="#000">(5)</text>
-<rect x="112" y="254" width="1.30" height="12" fill="#000" />
+<rect x="112" y="254" width="1.19" height="12" fill="#000" />
 <text xml:space="preserve" text-anchor="end" font-family='"Courier New", Courier, monospace' font-size="12" x="109" y="263" fill="#000">13</text>
-<text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="116.30" y="263" fill="#000">(12)</text>
+<text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="116.19" y="263" fill="#000">(11)</text>
 <rect x="112" y="271" width="0.54" height="12" fill="#000" />
 <text xml:space="preserve" text-anchor="end" font-family='"Courier New", Courier, monospace' font-size="12" x="109" y="280" fill="#000">14</text>
 <text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="115.54" y="280" fill="#000">(5)</text>
-<rect x="112" y="288" width="0.54" height="12" fill="#000" />
+<rect x="112" y="288" width="0.65" height="12" fill="#000" />
 <text xml:space="preserve" text-anchor="end" font-family='"Courier New", Courier, monospace' font-size="12" x="109" y="297" fill="#000">15</text>
-<text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="115.54" y="297" fill="#000">(5)</text>
+<text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="115.65" y="297" fill="#000">(6)</text>
 <rect x="112" y="305" width="0.11" height="12" fill="#000" />
 <text xml:space="preserve" text-anchor="end" font-family='"Courier New", Courier, monospace' font-size="12" x="109" y="314" fill="#000">16</text>
 <text xml:space="preserve" text-anchor="start" font-style="italic" font-family='"Courier New", Courier, monospace' font-size="12" x="115.11" y="314" fill="#000">(1)</text>
diff --git a/use/bytes..Contains.html b/use/bytes..Contains.html
index 27056b479af..2719f305e03 100644
--- a/use/bytes..Contains.html
+++ b/use/bytes..Contains.html
@@ -17,7 +17,7 @@
 		<a href="../src/bytes/bytes.go.html#line-77">bytes.go#L77</a>: func <b>Contains</b>(b, subslice []byte) bool {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-378">verify.go#L378</a>: 			bytes.<b>Contains</b>(localPartBytes, twoDots) {
+		<a href="../src/crypto/x509/verify.go.html#line-380">verify.go#L380</a>: 			bytes.<b>Contains</b>(localPartBytes, twoDots) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/bytes..Equal.html b/use/bytes..Equal.html
index 83ce4bca5eb..dc30392faed 100644
--- a/use/bytes..Equal.html
+++ b/use/bytes..Equal.html
@@ -104,11 +104,11 @@
 		<a href="../src/crypto/x509/parser.go.html#line-257">parser.go#L257</a>: 		if !bytes.<b>Equal</b>(params.FullBytes, asn1.NullBytes) {
 		<a href="../src/crypto/x509/parser.go.html#line-949" class="path-duplicate">parser.go</a><a href="../src/crypto/x509/parser.go.html#line-949">#L949</a>: 	if !bytes.<b>Equal</b>(outerSigAISeq, sigAISeq) {
 		<a href="../src/crypto/x509/parser.go.html#line-1156" class="path-duplicate">parser.go</a><a href="../src/crypto/x509/parser.go.html#line-1156">#L1156</a>: 	if !bytes.<b>Equal</b>(outerSigAISeq, sigAISeq) {
-		<a href="../src/crypto/x509/verify.go.html#line-450">verify.go#L450</a>: 		if !bytes.<b>Equal</b>(child.RawIssuer, c.RawSubject) {
-		<a href="../src/crypto/x509/verify.go.html#line-689" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-689">#L689</a>: 		if !bytes.<b>Equal</b>(candidate.RawSubject, cert.RawSubject) {
-		<a href="../src/crypto/x509/verify.go.html#line-695" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-695">#L695</a>: 		if !bytes.<b>Equal</b>(candidate.RawSubjectPublicKeyInfo, cert.RawSubjectPublicKeyInfo) {
-		<a href="../src/crypto/x509/verify.go.html#line-710" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-710">#L710</a>: 		if bytes.<b>Equal</b>(candidateSAN.Value, certSAN.Value) {
-		<a href="../src/crypto/x509/verify.go.html#line-1223" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-1223">#L1223</a>: 		isSelfSigned := bytes.<b>Equal</b>(cert.RawIssuer, cert.RawSubject)
+		<a href="../src/crypto/x509/verify.go.html#line-452">verify.go#L452</a>: 		if !bytes.<b>Equal</b>(child.RawIssuer, c.RawSubject) {
+		<a href="../src/crypto/x509/verify.go.html#line-694" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-694">#L694</a>: 		if !bytes.<b>Equal</b>(candidate.RawSubject, cert.RawSubject) {
+		<a href="../src/crypto/x509/verify.go.html#line-700" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-700">#L700</a>: 		if !bytes.<b>Equal</b>(candidate.RawSubjectPublicKeyInfo, cert.RawSubjectPublicKeyInfo) {
+		<a href="../src/crypto/x509/verify.go.html#line-715" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-715">#L715</a>: 		if bytes.<b>Equal</b>(candidateSAN.Value, certSAN.Value) {
+		<a href="../src/crypto/x509/verify.go.html#line-1228" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-1228">#L1228</a>: 		isSelfSigned := bytes.<b>Equal</b>(cert.RawIssuer, cert.RawSubject)
 		<a href="../src/crypto/x509/x509.go.html#line-452">x509.go#L452</a>: 	if (len(params.Hash.Parameters.FullBytes) != 0 &amp;&amp; !bytes.<b>Equal</b>(params.Hash.Parameters.FullBytes, asn1.NullBytes)) ||
 		<a href="../src/crypto/x509/x509.go.html#line-455" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-455">#L455</a>: 		(len(mgf1HashFunc.Parameters.FullBytes) != 0 &amp;&amp; !bytes.<b>Equal</b>(mgf1HashFunc.Parameters.FullBytes, asn1.NullBytes)) ||
 		<a href="../src/crypto/x509/x509.go.html#line-917" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-917">#L917</a>: 	return bytes.<b>Equal</b>(c.Raw, other.Raw)
diff --git a/use/crypto..PublicKey.html b/use/crypto..PublicKey.html
index 41ebd8c2137..8c5d8ba8974 100644
--- a/use/crypto..PublicKey.html
+++ b/use/crypto..PublicKey.html
@@ -42,7 +42,7 @@
 		<a href="../src/crypto/tls/handshake_server.go.html#line-690">handshake_server.go#L690</a>: 	var pub crypto.<b>PublicKey</b> // public key for client auth, if any
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-677">verify.go#L677</a>: 		Equal(crypto.<b>PublicKey</b>) bool
+		<a href="../src/crypto/x509/verify.go.html#line-682">verify.go#L682</a>: 		Equal(crypto.<b>PublicKey</b>) bool
 		<a href="../src/crypto/x509/x509.go.html#line-980">x509.go#L980</a>: func checkSignature(algo SignatureAlgorithm, signed, signature []byte, publicKey crypto.<b>PublicKey</b>, allowSHA1 bool) (err error) {
 		<a href="../src/crypto/x509/x509.go.html#line-1769" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-1769">#L1769</a>: 		Equal(crypto.<b>PublicKey</b>) bool
 
diff --git a/use/crypto/sha256..Sum256.html b/use/crypto/sha256..Sum256.html
index 9a91b0feb14..e0192e2c733 100644
--- a/use/crypto/sha256..Sum256.html
+++ b/use/crypto/sha256..Sum256.html
@@ -11,12 +11,13 @@
 
 <pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/sha256.html">crypto/sha256</a>.<a href="../../src/crypto/sha256/sha256.go.html#line-53">Sum256</a></b></span>
 
-<span class="title">9 uses</span>
+<span class="title">10 uses</span>
 
 	crypto/sha256 (current package)
 		<a href="../../src/crypto/sha256/sha256.go.html#line-53">sha256.go#L53</a>: func <b>Sum256</b>(data []byte) [Size]byte {
 
 	<a href="../../pkg/crypto/x509.html">crypto/x509</a>
+		<a href="../../src/crypto/x509/verify.go.html#line-1424">verify.go#L1424</a>: 		h := sha256.<b>Sum256</b>(c.RawSubjectPublicKeyInfo)
 		<a href="../../src/crypto/x509/x509.go.html#line-1762">x509.go#L1762</a>: 			h := sha256.<b>Sum256</b>(publicKeyBytes)
 
 	<a href="../../pkg/github.com/gotd/td/crypto.html">github.com/gotd/td/crypto</a>
diff --git a/use/crypto/x509..CANotAuthorizedForExtKeyUsage.html b/use/crypto/x509..CANotAuthorizedForExtKeyUsage.html
index bafcfe7d226..8ecf857ee6f 100644
--- a/use/crypto/x509..CANotAuthorizedForExtKeyUsage.html
+++ b/use/crypto/x509..CANotAuthorizedForExtKeyUsage.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-59">CANotAuthorizedForExtKeyUsage</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-61">CANotAuthorizedForExtKeyUsage</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-59">verify.go#L59</a>: 	<b>CANotAuthorizedForExtKeyUsage</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-80" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-80">#L80</a>: 	case <b>CANotAuthorizedForExtKeyUsage</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-61">verify.go#L61</a>: 	<b>CANotAuthorizedForExtKeyUsage</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-82" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-82">#L82</a>: 	case <b>CANotAuthorizedForExtKeyUsage</b>:
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CANotAuthorizedForThisName.html b/use/crypto/x509..CANotAuthorizedForThisName.html
index 5caef128a92..2a91b5c5813 100644
--- a/use/crypto/x509..CANotAuthorizedForThisName.html
+++ b/use/crypto/x509..CANotAuthorizedForThisName.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-35">CANotAuthorizedForThisName</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-37">CANotAuthorizedForThisName</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-35">verify.go#L35</a>: 	<b>CANotAuthorizedForThisName</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-78" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-78">#L78</a>: 	case <b>CANotAuthorizedForThisName</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-635" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-635">#L635</a>: 				constraintsHintErr = CertificateInvalidError{c, <b>CANotAuthorizedForThisName</b>, err.Error()}
+		<a href="../../src/crypto/x509/verify.go.html#line-37">verify.go#L37</a>: 	<b>CANotAuthorizedForThisName</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-80" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-80">#L80</a>: 	case <b>CANotAuthorizedForThisName</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-637" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-637">#L637</a>: 				constraintsHintErr = CertificateInvalidError{c, <b>CANotAuthorizedForThisName</b>, err.Error()}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertPool.cert^06298.html b/use/crypto/x509..CertPool.cert^06298.html
index 441fa293896..fe98201a30d 100644
--- a/use/crypto/x509..CertPool.cert^06298.html
+++ b/use/crypto/x509..CertPool.cert^06298.html
@@ -16,7 +16,7 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-81">cert_pool.go#L81</a>: func (s *CertPool) <b>cert</b>(n int) (*Certificate, func([]*Certificate) error, error) {
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-145" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-145">#L145</a>: 		candidate, constraint, err := s.<b>cert</b>(c)
-		<a href="../../src/crypto/x509/verify.go.html#line-549">verify.go#L549</a>: 		c, _, err := opts.Intermediates.<b>cert</b>(i)
+		<a href="../../src/crypto/x509/verify.go.html#line-551">verify.go#L551</a>: 		c, _, err := opts.Intermediates.<b>cert</b>(i)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertPool.contains^beeb2.html b/use/crypto/x509..CertPool.contains^beeb2.html
index 60dd48b17a4..dee9b59b9ee 100644
--- a/use/crypto/x509..CertPool.contains^beeb2.html
+++ b/use/crypto/x509..CertPool.contains^beeb2.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-172">cert_pool.go#L172</a>: func (s *CertPool) <b>contains</b>(cert *Certificate) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-597">verify.go#L597</a>: 	if opts.Roots.<b>contains</b>(c) {
+		<a href="../../src/crypto/x509/verify.go.html#line-599">verify.go#L599</a>: 	if opts.Roots.<b>contains</b>(c) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertPool.findPotentialParents^21ad5.html b/use/crypto/x509..CertPool.findPotentialParents^21ad5.html
index 98bfe00b979..3349b829051 100644
--- a/use/crypto/x509..CertPool.findPotentialParents^21ad5.html
+++ b/use/crypto/x509..CertPool.findPotentialParents^21ad5.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-132">cert_pool.go#L132</a>: func (s *CertPool) <b>findPotentialParents</b>(cert *Certificate) []potentialParent {
-		<a href="../../src/crypto/x509/verify.go.html#line-787">verify.go#L787</a>: 		{rootCertificate, opts.Roots.<b>findPotentialParents</b>(c)},
-		<a href="../../src/crypto/x509/verify.go.html#line-788" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-788">#L788</a>: 		{intermediateCertificate, opts.Intermediates.<b>findPotentialParents</b>(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-792">verify.go#L792</a>: 		{rootCertificate, opts.Roots.<b>findPotentialParents</b>(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-793" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-793">#L793</a>: 		{intermediateCertificate, opts.Intermediates.<b>findPotentialParents</b>(c)},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertPool.html b/use/crypto/x509..CertPool.html
index 7ae7341ac2c..01b0097542c 100644
--- a/use/crypto/x509..CertPool.html
+++ b/use/crypto/x509..CertPool.html
@@ -34,8 +34,8 @@
 		<a href="../../src/crypto/x509/root.go.html#line-31" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-31">#L31</a>: func systemRootsPool() *<b>CertPool</b> {
 		<a href="../../src/crypto/x509/root.go.html#line-80" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-80">#L80</a>: func SetFallbackRoots(roots *<b>CertPool</b>) {
 		<a href="../../src/crypto/x509/root_unix.go.html#line-32">root_unix.go#L32</a>: func loadSystemRoots() (*<b>CertPool</b>, error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-200">verify.go#L200</a>: 	Intermediates *<b>CertPool</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-203" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-203">#L203</a>: 	Roots *<b>CertPool</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-202">verify.go#L202</a>: 	Intermediates *<b>CertPool</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-205" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-205">#L205</a>: 	Roots *<b>CertPool</b>
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-682">common.go#L682</a>: 	RootCAs *x509.<b>CertPool</b>
diff --git a/use/crypto/x509..CertPool.len^71fa9.html b/use/crypto/x509..CertPool.len^71fa9.html
index 911ab4079b9..ef38a56552e 100644
--- a/use/crypto/x509..CertPool.len^71fa9.html
+++ b/use/crypto/x509..CertPool.len^71fa9.html
@@ -19,8 +19,8 @@
 		<a href="../../src/crypto/x509/root.go.html#line-52">root.go#L52</a>: 	systemCertsAvail := systemRoots != nil &amp;&amp; (systemRoots.<b>len</b>() &gt; 0 || systemRoots.systemPool)
 		<a href="../../src/crypto/x509/root.go.html#line-106" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-106">#L106</a>: 	systemCertsAvail := systemRoots != nil &amp;&amp; (systemRoots.<b>len</b>() &gt; 0 || systemRoots.systemPool)
 		<a href="../../src/crypto/x509/root_unix.go.html#line-77">root_unix.go#L77</a>: 	if roots.<b>len</b>() &gt; 0 || firstErr == nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-548">verify.go#L548</a>: 	for i := 0; i &lt; opts.Intermediates.<b>len</b>(); i++ {
-		<a href="../../src/crypto/x509/verify.go.html#line-571" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-571">#L571</a>: 			if err == nil || opts.Roots.<b>len</b>() == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-550">verify.go#L550</a>: 	for i := 0; i &lt; opts.Intermediates.<b>len</b>(); i++ {
+		<a href="../../src/crypto/x509/verify.go.html#line-573" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-573">#L573</a>: 			if err == nil || opts.Roots.<b>len</b>() == 0 {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertPool.systemPool^6c282.html b/use/crypto/x509..CertPool.systemPool^6c282.html
index 2775a5d3d70..e8095043599 100644
--- a/use/crypto/x509..CertPool.systemPool^6c282.html
+++ b/use/crypto/x509..CertPool.systemPool^6c282.html
@@ -19,8 +19,8 @@
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-271" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-271">#L271</a>: 	if s.<b>systemPool</b> != other.<b>systemPool</b> || len(s.haveSum) != len(other.haveSum) {
 		<a href="../../src/crypto/x509/root.go.html#line-52">root.go#L52</a>: 	systemCertsAvail := systemRoots != nil &amp;&amp; (systemRoots.len() &gt; 0 || systemRoots.<b>systemPool</b>)
 		<a href="../../src/crypto/x509/root.go.html#line-106" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-106">#L106</a>: 	systemCertsAvail := systemRoots != nil &amp;&amp; (systemRoots.len() &gt; 0 || systemRoots.<b>systemPool</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-563">verify.go#L563</a>: 		if opts.Roots == nil &amp;&amp; (systemPool == nil || systemPool.<b>systemPool</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-566" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-566">#L566</a>: 		if opts.Roots != nil &amp;&amp; opts.Roots.<b>systemPool</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-565">verify.go#L565</a>: 		if opts.Roots == nil &amp;&amp; (systemPool == nil || systemPool.<b>systemPool</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-568" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-568">#L568</a>: 		if opts.Roots != nil &amp;&amp; opts.Roots.<b>systemPool</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..Certificate.BasicConstraintsValid.html b/use/crypto/x509..Certificate.BasicConstraintsValid.html
index 79f6c710617..795f9d54730 100644
--- a/use/crypto/x509..Certificate.BasicConstraintsValid.html
+++ b/use/crypto/x509..Certificate.BasicConstraintsValid.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-689">parser.go#L689</a>: 				out.<b>BasicConstraintsValid</b> = true
-		<a href="../../src/crypto/x509/verify.go.html#line-496">verify.go#L496</a>: 	if certType == intermediateCertificate &amp;&amp; (!c.<b>BasicConstraintsValid</b> || !c.IsCA) {
-		<a href="../../src/crypto/x509/verify.go.html#line-500" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-500">#L500</a>: 	if c.<b>BasicConstraintsValid</b> &amp;&amp; c.MaxPathLen &gt;= 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-498">verify.go#L498</a>: 	if certType == intermediateCertificate &amp;&amp; (!c.<b>BasicConstraintsValid</b> || !c.IsCA) {
+		<a href="../../src/crypto/x509/verify.go.html#line-502" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-502">#L502</a>: 	if c.<b>BasicConstraintsValid</b> &amp;&amp; c.MaxPathLen &gt;= 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-751">x509.go#L751</a>: 	<b>BasicConstraintsValid</b> bool
 		<a href="../../src/crypto/x509/x509.go.html#line-934" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-934">#L934</a>: 	if parent.Version == 3 &amp;&amp; !parent.<b>BasicConstraintsValid</b> ||
 		<a href="../../src/crypto/x509/x509.go.html#line-935" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-935">#L935</a>: 		parent.<b>BasicConstraintsValid</b> &amp;&amp; !parent.IsCA {
diff --git a/use/crypto/x509..Certificate.CheckSignatureFrom.html b/use/crypto/x509..Certificate.CheckSignatureFrom.html
index b52f504a3a3..c8984182f6d 100644
--- a/use/crypto/x509..Certificate.CheckSignatureFrom.html
+++ b/use/crypto/x509..Certificate.CheckSignatureFrom.html
@@ -14,7 +14,7 @@
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-745">verify.go#L745</a>: 		if err := c.<b>CheckSignatureFrom</b>(candidate.cert); err != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-750">verify.go#L750</a>: 		if err := c.<b>CheckSignatureFrom</b>(candidate.cert); err != nil {
 		<a href="../../src/crypto/x509/x509.go.html#line-928">x509.go#L928</a>: func (c *Certificate) <b>CheckSignatureFrom</b>(parent *Certificate) error {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.DNSNames.html b/use/crypto/x509..Certificate.DNSNames.html
index 83458b2a484..e81e5cb69b1 100644
--- a/use/crypto/x509..Certificate.DNSNames.html
+++ b/use/crypto/x509..Certificate.DNSNames.html
@@ -17,10 +17,10 @@
 		<a href="../../src/crypto/x509/constraints.go.html#line-559">constraints.go#L559</a>: 			if err := n.check(c.<b>DNSNames</b>, uris, emails, c.IPAddresses); err != nil {
 		<a href="../../src/crypto/x509/parser.go.html#line-692">parser.go#L692</a>: 				out.<b>DNSNames</b>, out.EmailAddresses, out.IPAddresses, out.URIs, err = parseSANExtension(e.Value)
 		<a href="../../src/crypto/x509/parser.go.html#line-697" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-697">#L697</a>: 				if len(out.<b>DNSNames</b>) == 0 &amp;&amp; len(out.EmailAddresses) == 0 &amp;&amp; len(out.IPAddresses) == 0 &amp;&amp; len(out.URIs) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-133">verify.go#L133</a>: 		if len(c.<b>DNSNames</b>) &gt;= maxNamesIncluded {
-		<a href="../../src/crypto/x509/verify.go.html#line-134" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-134">#L134</a>: 			return fmt.Sprintf("x509: certificate is valid for %d names, but none matched %s", len(c.<b>DNSNames</b>), h.Host)
-		<a href="../../src/crypto/x509/verify.go.html#line-136" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-136">#L136</a>: 		valid.WriteString(strings.Join(c.<b>DNSNames</b>, ", "))
-		<a href="../../src/crypto/x509/verify.go.html#line-957" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-957">#L957</a>: 	for _, match := range c.<b>DNSNames</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-135">verify.go#L135</a>: 		if len(c.<b>DNSNames</b>) &gt;= maxNamesIncluded {
+		<a href="../../src/crypto/x509/verify.go.html#line-136" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-136">#L136</a>: 			return fmt.Sprintf("x509: certificate is valid for %d names, but none matched %s", len(c.<b>DNSNames</b>), h.Host)
+		<a href="../../src/crypto/x509/verify.go.html#line-138" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-138">#L138</a>: 		valid.WriteString(strings.Join(c.<b>DNSNames</b>, ", "))
+		<a href="../../src/crypto/x509/verify.go.html#line-962" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-962">#L962</a>: 	for _, match := range c.<b>DNSNames</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-783">x509.go#L783</a>: 	<b>DNSNames</b>       []string
 		<a href="../../src/crypto/x509/x509.go.html#line-1270" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1270">#L1270</a>: 	if (len(template.<b>DNSNames</b>) &gt; 0 || len(template.EmailAddresses) &gt; 0 || len(template.IPAddresses) &gt; 0 || len(template.URIs) &gt; 0) &amp;&amp;
 		<a href="../../src/crypto/x509/x509.go.html#line-1277" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1277">#L1277</a>: 		ret[n].Value, err = marshalSANs(template.<b>DNSNames</b>, template.EmailAddresses, template.IPAddresses, template.URIs)
diff --git a/use/crypto/x509..Certificate.ExtKeyUsage.html b/use/crypto/x509..Certificate.ExtKeyUsage.html
index e82365dc947..3e0c393dcef 100644
--- a/use/crypto/x509..Certificate.ExtKeyUsage.html
+++ b/use/crypto/x509..Certificate.ExtKeyUsage.html
@@ -15,9 +15,9 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-788">parser.go#L788</a>: 				out.<b>ExtKeyUsage</b>, out.UnknownExtKeyUsage, err = parseExtKeyUsageExtension(e.Value)
-		<a href="../../src/crypto/x509/verify.go.html#line-998">verify.go#L998</a>: 		if len(cert.<b>ExtKeyUsage</b>) == 0 &amp;&amp; len(cert.UnknownExtKeyUsage) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1003" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1003">#L1003</a>: 		for _, usage := range cert.<b>ExtKeyUsage</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1018" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1018">#L1018</a>: 			for _, usage := range cert.<b>ExtKeyUsage</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1003">verify.go#L1003</a>: 		if len(cert.<b>ExtKeyUsage</b>) == 0 &amp;&amp; len(cert.UnknownExtKeyUsage) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1008" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1008">#L1008</a>: 		for _, usage := range cert.<b>ExtKeyUsage</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1023" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1023">#L1023</a>: 			for _, usage := range cert.<b>ExtKeyUsage</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-746">x509.go#L746</a>: 	<b>ExtKeyUsage</b>        []ExtKeyUsage           // Sequence of extended key usages.
 		<a href="../../src/crypto/x509/x509.go.html#line-1212" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1212">#L1212</a>: 	if (len(template.<b>ExtKeyUsage</b>) &gt; 0 || len(template.UnknownExtKeyUsage) &gt; 0) &amp;&amp;
 		<a href="../../src/crypto/x509/x509.go.html#line-1214" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1214">#L1214</a>: 		ret[n], err = marshalExtKeyUsage(template.<b>ExtKeyUsage</b>, template.UnknownExtKeyUsage)
diff --git a/use/crypto/x509..Certificate.Extensions.html b/use/crypto/x509..Certificate.Extensions.html
index 6bd80eee06b..ed1e78fc11a 100644
--- a/use/crypto/x509..Certificate.Extensions.html
+++ b/use/crypto/x509..Certificate.Extensions.html
@@ -16,8 +16,8 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-674">parser.go#L674</a>: 	for _, e := range out.<b>Extensions</b> {
 		<a href="../../src/crypto/x509/parser.go.html#line-1052" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-1052">#L1052</a>: 					cert.<b>Extensions</b> = append(cert.<b>Extensions</b>, ext)
-		<a href="../../src/crypto/x509/verify.go.html#line-681">verify.go#L681</a>: 	for _, ext := range candidate.<b>Extensions</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-699" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-699">#L699</a>: 		for _, ext := range cert.<b>Extensions</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-686">verify.go#L686</a>: 	for _, ext := range candidate.<b>Extensions</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-704" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-704">#L704</a>: 		for _, ext := range cert.<b>Extensions</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-728">x509.go#L728</a>: 	<b>Extensions</b> []pkix.Extension
 		<a href="../../src/crypto/x509/x509.go.html#line-921" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-921">#L921</a>: 	return oidInExtensions(oidExtensionSubjectAltName, c.<b>Extensions</b>)
 		<a href="../../src/crypto/x509/x509.go.html#line-962" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-962">#L962</a>: 	return oidInExtensions(oidExtensionNameConstraints, c.<b>Extensions</b>)
diff --git a/use/crypto/x509..Certificate.IPAddresses.html b/use/crypto/x509..Certificate.IPAddresses.html
index 561b205a1f7..2257ffe3580 100644
--- a/use/crypto/x509..Certificate.IPAddresses.html
+++ b/use/crypto/x509..Certificate.IPAddresses.html
@@ -17,11 +17,11 @@
 		<a href="../../src/crypto/x509/constraints.go.html#line-559">constraints.go#L559</a>: 			if err := n.check(c.DNSNames, uris, emails, c.<b>IPAddresses</b>); err != nil {
 		<a href="../../src/crypto/x509/parser.go.html#line-692">parser.go#L692</a>: 				out.DNSNames, out.EmailAddresses, out.<b>IPAddresses</b>, out.URIs, err = parseSANExtension(e.Value)
 		<a href="../../src/crypto/x509/parser.go.html#line-697" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-697">#L697</a>: 				if len(out.DNSNames) == 0 &amp;&amp; len(out.EmailAddresses) == 0 &amp;&amp; len(out.<b>IPAddresses</b>) == 0 &amp;&amp; len(out.URIs) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-120">verify.go#L120</a>: 		if len(c.<b>IPAddresses</b>) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-123" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-123">#L123</a>: 		if len(c.<b>IPAddresses</b>) &gt;= maxNamesIncluded {
-		<a href="../../src/crypto/x509/verify.go.html#line-124" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-124">#L124</a>: 			return fmt.Sprintf("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.<b>IPAddresses</b>), h.Host)
-		<a href="../../src/crypto/x509/verify.go.html#line-126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-126">#L126</a>: 		for _, san := range c.<b>IPAddresses</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-945" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-945">#L945</a>: 		for _, candidate := range c.<b>IPAddresses</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-122">verify.go#L122</a>: 		if len(c.<b>IPAddresses</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-125" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-125">#L125</a>: 		if len(c.<b>IPAddresses</b>) &gt;= maxNamesIncluded {
+		<a href="../../src/crypto/x509/verify.go.html#line-126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-126">#L126</a>: 			return fmt.Sprintf("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.<b>IPAddresses</b>), h.Host)
+		<a href="../../src/crypto/x509/verify.go.html#line-128" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-128">#L128</a>: 		for _, san := range c.<b>IPAddresses</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-950" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-950">#L950</a>: 		for _, candidate := range c.<b>IPAddresses</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-785">x509.go#L785</a>: 	<b>IPAddresses</b>    []net.IP
 		<a href="../../src/crypto/x509/x509.go.html#line-1270" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1270">#L1270</a>: 	if (len(template.DNSNames) &gt; 0 || len(template.EmailAddresses) &gt; 0 || len(template.<b>IPAddresses</b>) &gt; 0 || len(template.URIs) &gt; 0) &amp;&amp;
 		<a href="../../src/crypto/x509/x509.go.html#line-1277" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1277">#L1277</a>: 		ret[n].Value, err = marshalSANs(template.DNSNames, template.EmailAddresses, template.<b>IPAddresses</b>, template.URIs)
diff --git a/use/crypto/x509..Certificate.InhibitAnyPolicy.html b/use/crypto/x509..Certificate.InhibitAnyPolicy.html
index 9f754cc929e..20cac44b0b9 100644
--- a/use/crypto/x509..Certificate.InhibitAnyPolicy.html
+++ b/use/crypto/x509..Certificate.InhibitAnyPolicy.html
@@ -16,8 +16,8 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-831">parser.go#L831</a>: 				if !val.ReadASN1Integer(&amp;out.<b>InhibitAnyPolicy</b>) {
 		<a href="../../src/crypto/x509/parser.go.html#line-834" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-834">#L834</a>: 				out.InhibitAnyPolicyZero = out.<b>InhibitAnyPolicy</b> == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1344">verify.go#L1344</a>: 			if (cert.<b>InhibitAnyPolicy</b> &gt; 0 || cert.InhibitAnyPolicyZero) &amp;&amp; cert.<b>InhibitAnyPolicy</b> &lt; inhibitAnyPolicy {
-		<a href="../../src/crypto/x509/verify.go.html#line-1345" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1345">#L1345</a>: 				inhibitAnyPolicy = cert.<b>InhibitAnyPolicy</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1349">verify.go#L1349</a>: 			if (cert.<b>InhibitAnyPolicy</b> &gt; 0 || cert.InhibitAnyPolicyZero) &amp;&amp; cert.<b>InhibitAnyPolicy</b> &lt; inhibitAnyPolicy {
+		<a href="../../src/crypto/x509/verify.go.html#line-1350" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1350">#L1350</a>: 				inhibitAnyPolicy = cert.<b>InhibitAnyPolicy</b>
 		<a href="../../src/crypto/x509/x509.go.html#line-829">x509.go#L829</a>: 	<b>InhibitAnyPolicy</b> int
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.InhibitAnyPolicyZero.html b/use/crypto/x509..Certificate.InhibitAnyPolicyZero.html
index d943b95be39..7a50499b65a 100644
--- a/use/crypto/x509..Certificate.InhibitAnyPolicyZero.html
+++ b/use/crypto/x509..Certificate.InhibitAnyPolicyZero.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-834">parser.go#L834</a>: 				out.<b>InhibitAnyPolicyZero</b> = out.InhibitAnyPolicy == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1344">verify.go#L1344</a>: 			if (cert.InhibitAnyPolicy &gt; 0 || cert.<b>InhibitAnyPolicyZero</b>) &amp;&amp; cert.InhibitAnyPolicy &lt; inhibitAnyPolicy {
+		<a href="../../src/crypto/x509/verify.go.html#line-1349">verify.go#L1349</a>: 			if (cert.InhibitAnyPolicy &gt; 0 || cert.<b>InhibitAnyPolicyZero</b>) &amp;&amp; cert.InhibitAnyPolicy &lt; inhibitAnyPolicy {
 		<a href="../../src/crypto/x509/x509.go.html#line-833">x509.go#L833</a>: 	<b>InhibitAnyPolicyZero</b> bool
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.InhibitPolicyMapping.html b/use/crypto/x509..Certificate.InhibitPolicyMapping.html
index 552611be2a3..6b8347aafe7 100644
--- a/use/crypto/x509..Certificate.InhibitPolicyMapping.html
+++ b/use/crypto/x509..Certificate.InhibitPolicyMapping.html
@@ -17,8 +17,8 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-780">parser.go#L780</a>: 					out.<b>InhibitPolicyMapping</b> = int(v)
 		<a href="../../src/crypto/x509/parser.go.html#line-782" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-782">#L782</a>: 					if int64(out.<b>InhibitPolicyMapping</b>) != v {
 		<a href="../../src/crypto/x509/parser.go.html#line-785" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-785">#L785</a>: 					out.InhibitPolicyMappingZero = out.<b>InhibitPolicyMapping</b> == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1340">verify.go#L1340</a>: 			if (cert.<b>InhibitPolicyMapping</b> &gt; 0 || cert.InhibitPolicyMappingZero) &amp;&amp; cert.<b>InhibitPolicyMapping</b> &lt; policyMapping {
-		<a href="../../src/crypto/x509/verify.go.html#line-1341" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1341">#L1341</a>: 				policyMapping = cert.<b>InhibitPolicyMapping</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1345">verify.go#L1345</a>: 			if (cert.<b>InhibitPolicyMapping</b> &gt; 0 || cert.InhibitPolicyMappingZero) &amp;&amp; cert.<b>InhibitPolicyMapping</b> &lt; policyMapping {
+		<a href="../../src/crypto/x509/verify.go.html#line-1346" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1346">#L1346</a>: 				policyMapping = cert.<b>InhibitPolicyMapping</b>
 		<a href="../../src/crypto/x509/x509.go.html#line-849">x509.go#L849</a>: 	<b>InhibitPolicyMapping</b> int
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.InhibitPolicyMappingZero.html b/use/crypto/x509..Certificate.InhibitPolicyMappingZero.html
index 90845fcae76..cbe7ed1809a 100644
--- a/use/crypto/x509..Certificate.InhibitPolicyMappingZero.html
+++ b/use/crypto/x509..Certificate.InhibitPolicyMappingZero.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-785">parser.go#L785</a>: 					out.<b>InhibitPolicyMappingZero</b> = out.InhibitPolicyMapping == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1340">verify.go#L1340</a>: 			if (cert.InhibitPolicyMapping &gt; 0 || cert.<b>InhibitPolicyMappingZero</b>) &amp;&amp; cert.InhibitPolicyMapping &lt; policyMapping {
+		<a href="../../src/crypto/x509/verify.go.html#line-1345">verify.go#L1345</a>: 			if (cert.InhibitPolicyMapping &gt; 0 || cert.<b>InhibitPolicyMappingZero</b>) &amp;&amp; cert.InhibitPolicyMapping &lt; policyMapping {
 		<a href="../../src/crypto/x509/x509.go.html#line-853">x509.go#L853</a>: 	<b>InhibitPolicyMappingZero</b> bool
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.IsCA.html b/use/crypto/x509..Certificate.IsCA.html
index 87d4f9d072a..04c2a858699 100644
--- a/use/crypto/x509..Certificate.IsCA.html
+++ b/use/crypto/x509..Certificate.IsCA.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-685">parser.go#L685</a>: 				out.<b>IsCA</b>, out.MaxPathLen, err = parseBasicConstraintsExtension(e.Value)
-		<a href="../../src/crypto/x509/verify.go.html#line-496">verify.go#L496</a>: 	if certType == intermediateCertificate &amp;&amp; (!c.BasicConstraintsValid || !c.<b>IsCA</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-498">verify.go#L498</a>: 	if certType == intermediateCertificate &amp;&amp; (!c.BasicConstraintsValid || !c.<b>IsCA</b>) {
 		<a href="../../src/crypto/x509/x509.go.html#line-752">x509.go#L752</a>: 	<b>IsCA</b>                  bool
 		<a href="../../src/crypto/x509/x509.go.html#line-935" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-935">#L935</a>: 		parent.BasicConstraintsValid &amp;&amp; !parent.<b>IsCA</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-1222" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1222">#L1222</a>: 		ret[n], err = marshalBasicConstraints(template.<b>IsCA</b>, template.MaxPathLen, template.MaxPathLenZero)
diff --git a/use/crypto/x509..Certificate.MaxPathLen.html b/use/crypto/x509..Certificate.MaxPathLen.html
index b163603016b..88c254300af 100644
--- a/use/crypto/x509..Certificate.MaxPathLen.html
+++ b/use/crypto/x509..Certificate.MaxPathLen.html
@@ -16,8 +16,8 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-685">parser.go#L685</a>: 				out.IsCA, out.<b>MaxPathLen</b>, err = parseBasicConstraintsExtension(e.Value)
 		<a href="../../src/crypto/x509/parser.go.html#line-690" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-690">#L690</a>: 				out.MaxPathLenZero = out.<b>MaxPathLen</b> == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-500">verify.go#L500</a>: 	if c.BasicConstraintsValid &amp;&amp; c.<b>MaxPathLen</b> &gt;= 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-502" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-502">#L502</a>: 		if numIntermediates &gt; c.<b>MaxPathLen</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-502">verify.go#L502</a>: 	if c.BasicConstraintsValid &amp;&amp; c.<b>MaxPathLen</b> &gt;= 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-504" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-504">#L504</a>: 		if numIntermediates &gt; c.<b>MaxPathLen</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-766">x509.go#L766</a>: 	<b>MaxPathLen</b> int
 		<a href="../../src/crypto/x509/x509.go.html#line-1222" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1222">#L1222</a>: 		ret[n], err = marshalBasicConstraints(template.IsCA, template.<b>MaxPathLen</b>, template.MaxPathLenZero)
 		<a href="../../src/crypto/x509/x509.go.html#line-1711" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1711">#L1711</a>: 	if template.BasicConstraintsValid &amp;&amp; template.<b>MaxPathLen</b> &lt; -1 {
diff --git a/use/crypto/x509..Certificate.NotAfter.html b/use/crypto/x509..Certificate.NotAfter.html
index b3b39c45865..cc05f8a3e1c 100644
--- a/use/crypto/x509..Certificate.NotAfter.html
+++ b/use/crypto/x509..Certificate.NotAfter.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-973">parser.go#L973</a>: 	cert.NotBefore, cert.<b>NotAfter</b>, err = parseValidity(validity)
-		<a href="../../src/crypto/x509/verify.go.html#line-465">verify.go#L465</a>: 	} else if now.After(c.<b>NotAfter</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.Format(time.RFC3339), c.<b>NotAfter</b>.Format(time.RFC3339)),
+		<a href="../../src/crypto/x509/verify.go.html#line-467">verify.go#L467</a>: 	} else if now.After(c.<b>NotAfter</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-471" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-471">#L471</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.Format(time.RFC3339), c.<b>NotAfter</b>.Format(time.RFC3339)),
 		<a href="../../src/crypto/x509/x509.go.html#line-721">x509.go#L721</a>: 	NotBefore, <b>NotAfter</b> time.Time // Validity bounds.
 		<a href="../../src/crypto/x509/x509.go.html#line-1788" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1788">#L1788</a>: 		Validity:           validity{template.NotBefore.UTC(), template.<b>NotAfter</b>.UTC()},
 
diff --git a/use/crypto/x509..Certificate.NotBefore.html b/use/crypto/x509..Certificate.NotBefore.html
index 0b7f8aef963..4859a8d059f 100644
--- a/use/crypto/x509..Certificate.NotBefore.html
+++ b/use/crypto/x509..Certificate.NotBefore.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-973">parser.go#L973</a>: 	cert.<b>NotBefore</b>, cert.NotAfter, err = parseValidity(validity)
-		<a href="../../src/crypto/x509/verify.go.html#line-459">verify.go#L459</a>: 	if now.Before(c.<b>NotBefore</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-463" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-463">#L463</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.Format(time.RFC3339), c.<b>NotBefore</b>.Format(time.RFC3339)),
+		<a href="../../src/crypto/x509/verify.go.html#line-461">verify.go#L461</a>: 	if now.Before(c.<b>NotBefore</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-465" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-465">#L465</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.Format(time.RFC3339), c.<b>NotBefore</b>.Format(time.RFC3339)),
 		<a href="../../src/crypto/x509/x509.go.html#line-721">x509.go#L721</a>: 	<b>NotBefore</b>, NotAfter time.Time // Validity bounds.
 		<a href="../../src/crypto/x509/x509.go.html#line-1788" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1788">#L1788</a>: 		Validity:           validity{template.<b>NotBefore</b>.UTC(), template.NotAfter.UTC()},
 
diff --git a/use/crypto/x509..Certificate.Policies.html b/use/crypto/x509..Certificate.Policies.html
index 72c750e07e7..10c47e1a0d5 100644
--- a/use/crypto/x509..Certificate.Policies.html
+++ b/use/crypto/x509..Certificate.Policies.html
@@ -17,8 +17,8 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-804">parser.go#L804</a>: 				out.<b>Policies</b>, err = parseCertificatePoliciesExtension(e.Value)
 		<a href="../../src/crypto/x509/parser.go.html#line-808" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-808">#L808</a>: 				out.PolicyIdentifiers = make([]asn1.ObjectIdentifier, 0, len(out.<b>Policies</b>))
 		<a href="../../src/crypto/x509/parser.go.html#line-809" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-809">#L809</a>: 				for _, oid := range out.<b>Policies</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1226">verify.go#L1226</a>: 		if len(cert.<b>Policies</b>) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1241" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1241">#L1241</a>: 			for _, policy := range cert.<b>Policies</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1231">verify.go#L1231</a>: 		if len(cert.<b>Policies</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1246" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1246">#L1246</a>: 			for _, policy := range cert.<b>Policies</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-815">x509.go#L815</a>: 	<b>Policies</b> []OID
 		<a href="../../src/crypto/x509/x509.go.html#line-1285" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1285">#L1285</a>: 	if ((!usePolicies &amp;&amp; len(template.PolicyIdentifiers) &gt; 0) || (usePolicies &amp;&amp; len(template.<b>Policies</b>) &gt; 0)) &amp;&amp;
 		<a href="../../src/crypto/x509/x509.go.html#line-1287" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1287">#L1287</a>: 		ret[n], err = marshalCertificatePolicies(template.<b>Policies</b>, template.PolicyIdentifiers)
diff --git a/use/crypto/x509..Certificate.PolicyMappings.html b/use/crypto/x509..Certificate.PolicyMappings.html
index 43a171edca7..93266caae3b 100644
--- a/use/crypto/x509..Certificate.PolicyMappings.html
+++ b/use/crypto/x509..Certificate.PolicyMappings.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-827">parser.go#L827</a>: 					out.<b>PolicyMappings</b> = append(out.<b>PolicyMappings</b>, PolicyMapping{OID{issuer}, OID{subject}})
-		<a href="../../src/crypto/x509/verify.go.html#line-1287">verify.go#L1287</a>: 				if len(cert.<b>PolicyMappings</b>) &gt; 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1291" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1291">#L1291</a>: 					for _, mapping := range cert.<b>PolicyMappings</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1292">verify.go#L1292</a>: 				if len(cert.<b>PolicyMappings</b>) &gt; 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1296" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1296">#L1296</a>: 					for _, mapping := range cert.<b>PolicyMappings</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-879">x509.go#L879</a>: 	<b>PolicyMappings</b> []PolicyMapping
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.PublicKey.html b/use/crypto/x509..Certificate.PublicKey.html
index 9ec08f82c16..659e3af0ec4 100644
--- a/use/crypto/x509..Certificate.PublicKey.html
+++ b/use/crypto/x509..Certificate.PublicKey.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-1011">parser.go#L1011</a>: 		cert.<b>PublicKey</b>, err = parsePublicKey(&amp;publicKeyInfo{
-		<a href="../../src/crypto/x509/verify.go.html#line-741">verify.go#L741</a>: 		if candidate.cert.<b>PublicKey</b> == nil || alreadyInChain(candidate.cert, currentChain) {
+		<a href="../../src/crypto/x509/verify.go.html#line-746">verify.go#L746</a>: 		if candidate.cert.<b>PublicKey</b> == nil || alreadyInChain(candidate.cert, currentChain) {
 		<a href="../../src/crypto/x509/x509.go.html#line-715">x509.go#L715</a>: 	<b>PublicKey</b>          any
 		<a href="../../src/crypto/x509/x509.go.html#line-947" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-947">#L947</a>: 	return checkSignature(c.SignatureAlgorithm, c.RawTBSCertificate, c.Signature, parent.<b>PublicKey</b>, false)
 		<a href="../../src/crypto/x509/x509.go.html#line-958" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-958">#L958</a>: 	return checkSignature(algo, signed, signature, c.<b>PublicKey</b>, true)
diff --git a/use/crypto/x509..Certificate.Raw.html b/use/crypto/x509..Certificate.Raw.html
index 9c527ab46ed..2b15ed5283f 100644
--- a/use/crypto/x509..Certificate.Raw.html
+++ b/use/crypto/x509..Certificate.Raw.html
@@ -21,8 +21,8 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-896">parser.go#L896</a>: 	cert.<b>Raw</b> = input
 		<a href="../../src/crypto/x509/parser.go.html#line-1081" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-1081">#L1081</a>: 	if len(der) != len(cert.<b>Raw</b>) {
 		<a href="../../src/crypto/x509/parser.go.html#line-1097" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-1097">#L1097</a>: 		der = der[len(cert.<b>Raw</b>):]
-		<a href="../../src/crypto/x509/verify.go.html#line-545">verify.go#L545</a>: 	if len(c.<b>Raw</b>) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-553" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-553">#L553</a>: 		if len(c.<b>Raw</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-547">verify.go#L547</a>: 	if len(c.<b>Raw</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-555" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-555">#L555</a>: 		if len(c.<b>Raw</b>) == 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-705">x509.go#L705</a>: 	<b>Raw</b>                     []byte // Complete ASN.1 DER content (certificate, signature algorithm and signature).
 		<a href="../../src/crypto/x509/x509.go.html#line-917" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-917">#L917</a>: 	return bytes.Equal(c.<b>Raw</b>, other.<b>Raw</b>)
 
diff --git a/use/crypto/x509..Certificate.RawIssuer.html b/use/crypto/x509..Certificate.RawIssuer.html
index 8c6f1d93351..c18ff8563da 100644
--- a/use/crypto/x509..Certificate.RawIssuer.html
+++ b/use/crypto/x509..Certificate.RawIssuer.html
@@ -16,8 +16,8 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-144">cert_pool.go#L144</a>: 	for _, c := range s.byName[string(cert.<b>RawIssuer</b>)] {
 		<a href="../../src/crypto/x509/parser.go.html#line-962">parser.go#L962</a>: 	cert.<b>RawIssuer</b> = issuerSeq
-		<a href="../../src/crypto/x509/verify.go.html#line-450">verify.go#L450</a>: 		if !bytes.Equal(child.<b>RawIssuer</b>, c.RawSubject) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1223" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1223">#L1223</a>: 		isSelfSigned := bytes.Equal(cert.<b>RawIssuer</b>, cert.RawSubject)
+		<a href="../../src/crypto/x509/verify.go.html#line-452">verify.go#L452</a>: 		if !bytes.Equal(child.<b>RawIssuer</b>, c.RawSubject) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1228" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1228">#L1228</a>: 		isSelfSigned := bytes.Equal(cert.<b>RawIssuer</b>, cert.RawSubject)
 		<a href="../../src/crypto/x509/x509.go.html#line-709">x509.go#L709</a>: 	<b>RawIssuer</b>               []byte // DER encoded Issuer
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
diff --git a/use/crypto/x509..Certificate.RawSubject.html b/use/crypto/x509..Certificate.RawSubject.html
index a8b28af87b8..3c53b413bf3 100644
--- a/use/crypto/x509..Certificate.RawSubject.html
+++ b/use/crypto/x509..Certificate.RawSubject.html
@@ -18,9 +18,9 @@
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-239" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-239">#L239</a>: 		s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.<b>RawSubject</b>), func() (*Certificate, error) {
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-291" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-291">#L291</a>: 	s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.<b>RawSubject</b>), func() (*Certificate, error) {
 		<a href="../../src/crypto/x509/parser.go.html#line-982">parser.go#L982</a>: 	cert.<b>RawSubject</b> = subjectSeq
-		<a href="../../src/crypto/x509/verify.go.html#line-450">verify.go#L450</a>: 		if !bytes.Equal(child.RawIssuer, c.<b>RawSubject</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-689" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-689">#L689</a>: 		if !bytes.Equal(candidate.<b>RawSubject</b>, cert.<b>RawSubject</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1223" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1223">#L1223</a>: 		isSelfSigned := bytes.Equal(cert.RawIssuer, cert.<b>RawSubject</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-452">verify.go#L452</a>: 		if !bytes.Equal(child.RawIssuer, c.<b>RawSubject</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-694" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-694">#L694</a>: 		if !bytes.Equal(candidate.<b>RawSubject</b>, cert.<b>RawSubject</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1228" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1228">#L1228</a>: 		isSelfSigned := bytes.Equal(cert.RawIssuer, cert.<b>RawSubject</b>)
 		<a href="../../src/crypto/x509/x509.go.html#line-708">x509.go#L708</a>: 	<b>RawSubject</b>              []byte // DER encoded Subject
 		<a href="../../src/crypto/x509/x509.go.html#line-1524" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1524">#L1524</a>: 	if len(cert.<b>RawSubject</b>) &gt; 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-1525" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1525">#L1525</a>: 		return cert.<b>RawSubject</b>, nil
diff --git a/use/crypto/x509..Certificate.RawSubjectPublicKeyInfo.html b/use/crypto/x509..Certificate.RawSubjectPublicKeyInfo.html
index 5af01adbc4c..2ca41d15d39 100644
--- a/use/crypto/x509..Certificate.RawSubjectPublicKeyInfo.html
+++ b/use/crypto/x509..Certificate.RawSubjectPublicKeyInfo.html
@@ -11,11 +11,12 @@
 
 <pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/x509.go.html#line-707">RawSubjectPublicKeyInfo</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
-<span class="title">4 uses</span>
+<span class="title">5 uses</span>
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-993">parser.go#L993</a>: 	cert.<b>RawSubjectPublicKeyInfo</b> = spki
-		<a href="../../src/crypto/x509/verify.go.html#line-695">verify.go#L695</a>: 		if !bytes.Equal(candidate.<b>RawSubjectPublicKeyInfo</b>, cert.<b>RawSubjectPublicKeyInfo</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-700">verify.go#L700</a>: 		if !bytes.Equal(candidate.<b>RawSubjectPublicKeyInfo</b>, cert.<b>RawSubjectPublicKeyInfo</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1424" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1424">#L1424</a>: 		h := sha256.Sum256(c.<b>RawSubjectPublicKeyInfo</b>)
 		<a href="../../src/crypto/x509/x509.go.html#line-707">x509.go#L707</a>: 	<b>RawSubjectPublicKeyInfo</b> []byte // DER encoded SubjectPublicKeyInfo.
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.RequireExplicitPolicy.html b/use/crypto/x509..Certificate.RequireExplicitPolicy.html
index b7d5820a2ac..a79a6897ca1 100644
--- a/use/crypto/x509..Certificate.RequireExplicitPolicy.html
+++ b/use/crypto/x509..Certificate.RequireExplicitPolicy.html
@@ -17,8 +17,8 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-768">parser.go#L768</a>: 					out.<b>RequireExplicitPolicy</b> = int(v)
 		<a href="../../src/crypto/x509/parser.go.html#line-770" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-770">#L770</a>: 					if int64(out.<b>RequireExplicitPolicy</b>) != v {
 		<a href="../../src/crypto/x509/parser.go.html#line-773" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-773">#L773</a>: 					out.RequireExplicitPolicyZero = out.<b>RequireExplicitPolicy</b> == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1337">verify.go#L1337</a>: 			if (cert.<b>RequireExplicitPolicy</b> &gt; 0 || cert.RequireExplicitPolicyZero) &amp;&amp; cert.<b>RequireExplicitPolicy</b> &lt; explicitPolicy {
-		<a href="../../src/crypto/x509/verify.go.html#line-1338" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1338">#L1338</a>: 				explicitPolicy = cert.<b>RequireExplicitPolicy</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1342">verify.go#L1342</a>: 			if (cert.<b>RequireExplicitPolicy</b> &gt; 0 || cert.RequireExplicitPolicyZero) &amp;&amp; cert.<b>RequireExplicitPolicy</b> &lt; explicitPolicy {
+		<a href="../../src/crypto/x509/verify.go.html#line-1343" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1343">#L1343</a>: 				explicitPolicy = cert.<b>RequireExplicitPolicy</b>
 		<a href="../../src/crypto/x509/x509.go.html#line-872">x509.go#L872</a>: 	<b>RequireExplicitPolicy</b> int
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.RequireExplicitPolicyZero.html b/use/crypto/x509..Certificate.RequireExplicitPolicyZero.html
index 09f23709abd..fcb8df878a3 100644
--- a/use/crypto/x509..Certificate.RequireExplicitPolicyZero.html
+++ b/use/crypto/x509..Certificate.RequireExplicitPolicyZero.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-773">parser.go#L773</a>: 					out.<b>RequireExplicitPolicyZero</b> = out.RequireExplicitPolicy == 0
-		<a href="../../src/crypto/x509/verify.go.html#line-1337">verify.go#L1337</a>: 			if (cert.RequireExplicitPolicy &gt; 0 || cert.<b>RequireExplicitPolicyZero</b>) &amp;&amp; cert.RequireExplicitPolicy &lt; explicitPolicy {
-		<a href="../../src/crypto/x509/verify.go.html#line-1356" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1356">#L1356</a>: 	if chain[0].<b>RequireExplicitPolicyZero</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1342">verify.go#L1342</a>: 			if (cert.RequireExplicitPolicy &gt; 0 || cert.<b>RequireExplicitPolicyZero</b>) &amp;&amp; cert.RequireExplicitPolicy &lt; explicitPolicy {
+		<a href="../../src/crypto/x509/verify.go.html#line-1361" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1361">#L1361</a>: 	if chain[0].<b>RequireExplicitPolicyZero</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-876">x509.go#L876</a>: 	<b>RequireExplicitPolicyZero</b> bool
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.SerialNumber.html b/use/crypto/x509..Certificate.SerialNumber.html
index 3f49859ca23..0a77b734e59 100644
--- a/use/crypto/x509..Certificate.SerialNumber.html
+++ b/use/crypto/x509..Certificate.SerialNumber.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-936">parser.go#L936</a>: 	cert.<b>SerialNumber</b> = serial
-		<a href="../../src/crypto/x509/verify.go.html#line-164">verify.go#L164</a>: 				certName = "serial:" + e.hintCert.<b>SerialNumber</b>.String()
+		<a href="../../src/crypto/x509/verify.go.html#line-166">verify.go#L166</a>: 				certName = "serial:" + e.hintCert.<b>SerialNumber</b>.String()
 		<a href="../../src/crypto/x509/x509.go.html#line-718">x509.go#L718</a>: 	<b>SerialNumber</b>        *big.Int
 		<a href="../../src/crypto/x509/x509.go.html#line-1685" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1685">#L1685</a>: 	serialNumber := template.<b>SerialNumber</b>
 </code></pre><pre id="footer">
diff --git a/use/crypto/x509..Certificate.Subject.html b/use/crypto/x509..Certificate.Subject.html
index dcff8a07afe..281d73c89a1 100644
--- a/use/crypto/x509..Certificate.Subject.html
+++ b/use/crypto/x509..Certificate.Subject.html
@@ -15,10 +15,10 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-987">parser.go#L987</a>: 	cert.<b>Subject</b>.FillFromRDNSequence(subjectRDNs)
-		<a href="../../src/crypto/x509/verify.go.html#line-113">verify.go#L113</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.<b>Subject</b>.CommonName, splitHostname(h.Host)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-159" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-159">#L159</a>: 		certName := e.hintCert.<b>Subject</b>.CommonName
-		<a href="../../src/crypto/x509/verify.go.html#line-161" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-161">#L161</a>: 			if len(e.hintCert.<b>Subject</b>.Organization) &gt; 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-162">#L162</a>: 				certName = e.hintCert.<b>Subject</b>.Organization[0]
+		<a href="../../src/crypto/x509/verify.go.html#line-115">verify.go#L115</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.<b>Subject</b>.CommonName, splitHostname(h.Host)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-161" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-161">#L161</a>: 		certName := e.hintCert.<b>Subject</b>.CommonName
+		<a href="../../src/crypto/x509/verify.go.html#line-163" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-163">#L163</a>: 			if len(e.hintCert.<b>Subject</b>.Organization) &gt; 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-164" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-164">#L164</a>: 				certName = e.hintCert.<b>Subject</b>.Organization[0]
 		<a href="../../src/crypto/x509/x509.go.html#line-720">x509.go#L720</a>: 	<b>Subject</b>             pkix.Name
 		<a href="../../src/crypto/x509/x509.go.html#line-1528" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1528">#L1528</a>: 	return asn1.Marshal(cert.<b>Subject</b>.ToRDNSequence())
 		<a href="../../src/crypto/x509/x509.go.html#line-1876" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1876">#L1876</a>: 		Issuer:              c.<b>Subject</b>.ToRDNSequence(),
diff --git a/use/crypto/x509..Certificate.UnhandledCriticalExtensions.html b/use/crypto/x509..Certificate.UnhandledCriticalExtensions.html
index de39f80674d..9fcde2e9aac 100644
--- a/use/crypto/x509..Certificate.UnhandledCriticalExtensions.html
+++ b/use/crypto/x509..Certificate.UnhandledCriticalExtensions.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-877">parser.go#L877</a>: 			out.<b>UnhandledCriticalExtensions</b> = append(out.<b>UnhandledCriticalExtensions</b>, e.Id)
-		<a href="../../src/crypto/x509/verify.go.html#line-444">verify.go#L444</a>: 	if len(c.<b>UnhandledCriticalExtensions</b>) &gt; 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-446">verify.go#L446</a>: 	if len(c.<b>UnhandledCriticalExtensions</b>) &gt; 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-744">x509.go#L744</a>: 	<b>UnhandledCriticalExtensions</b> []asn1.ObjectIdentifier
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.UnknownExtKeyUsage.html b/use/crypto/x509..Certificate.UnknownExtKeyUsage.html
index 7f31943d45e..4bd67ba40fd 100644
--- a/use/crypto/x509..Certificate.UnknownExtKeyUsage.html
+++ b/use/crypto/x509..Certificate.UnknownExtKeyUsage.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-788">parser.go#L788</a>: 				out.ExtKeyUsage, out.<b>UnknownExtKeyUsage</b>, err = parseExtKeyUsageExtension(e.Value)
-		<a href="../../src/crypto/x509/verify.go.html#line-998">verify.go#L998</a>: 		if len(cert.ExtKeyUsage) == 0 &amp;&amp; len(cert.<b>UnknownExtKeyUsage</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1003">verify.go#L1003</a>: 		if len(cert.ExtKeyUsage) == 0 &amp;&amp; len(cert.<b>UnknownExtKeyUsage</b>) == 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-747">x509.go#L747</a>: 	<b>UnknownExtKeyUsage</b> []asn1.ObjectIdentifier // Encountered extended key usages unknown to this package.
 		<a href="../../src/crypto/x509/x509.go.html#line-1212" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1212">#L1212</a>: 	if (len(template.ExtKeyUsage) &gt; 0 || len(template.<b>UnknownExtKeyUsage</b>) &gt; 0) &amp;&amp;
 		<a href="../../src/crypto/x509/x509.go.html#line-1214" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1214">#L1214</a>: 		ret[n], err = marshalExtKeyUsage(template.ExtKeyUsage, template.<b>UnknownExtKeyUsage</b>)
diff --git a/use/crypto/x509..Certificate.Verify.html b/use/crypto/x509..Certificate.Verify.html
index 249692eeb42..1afb6dd7224 100644
--- a/use/crypto/x509..Certificate.Verify.html
+++ b/use/crypto/x509..Certificate.Verify.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-542">Verify</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-544">Verify</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">9 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-542">verify.go#L542</a>: func (c *Certificate) <b>Verify</b>(opts VerifyOptions) ([][]*Certificate, error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-544">verify.go#L544</a>: func (c *Certificate) <b>Verify</b>(opts VerifyOptions) ([][]*Certificate, error) {
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-1890">common.go#L1890</a>: 			if _, err := leaf.<b>Verify</b>(opts); err == nil {
diff --git a/use/crypto/x509..Certificate.VerifyHostname.html b/use/crypto/x509..Certificate.VerifyHostname.html
index c7721b2e60f..90621030782 100644
--- a/use/crypto/x509..Certificate.VerifyHostname.html
+++ b/use/crypto/x509..Certificate.VerifyHostname.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-936">VerifyHostname</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-941">VerifyHostname</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">8 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-590">verify.go#L590</a>: 		err = c.<b>VerifyHostname</b>(opts.DNSName)
-		<a href="../../src/crypto/x509/verify.go.html#line-936" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-936">#L936</a>: func (c *Certificate) <b>VerifyHostname</b>(h string) error {
+		<a href="../../src/crypto/x509/verify.go.html#line-592">verify.go#L592</a>: 		err = c.<b>VerifyHostname</b>(opts.DNSName)
+		<a href="../../src/crypto/x509/verify.go.html#line-941" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-941">#L941</a>: func (c *Certificate) <b>VerifyHostname</b>(h string) error {
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-1393">common.go#L1393</a>: 		if err := x509Cert.<b>VerifyHostname</b>(chi.ServerName); err != nil {
diff --git a/use/crypto/x509..Certificate.buildChains^bda2f.html b/use/crypto/x509..Certificate.buildChains^bda2f.html
index 7a36f305c80..3ee6b6e75bc 100644
--- a/use/crypto/x509..Certificate.buildChains^bda2f.html
+++ b/use/crypto/x509..Certificate.buildChains^bda2f.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-725">buildChains</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-730">buildChains</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-600">verify.go#L600</a>: 		candidateChains, err = c.<b>buildChains</b>([]*Certificate{c}, nil, &amp;opts)
-		<a href="../../src/crypto/x509/verify.go.html#line-725" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-725">#L725</a>: func (c *Certificate) <b>buildChains</b>(currentChain []*Certificate, sigChecks *int, opts *VerifyOptions) (chains [][]*Certificate, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-777" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-777">#L777</a>: 			childChains, err = candidate.cert.<b>buildChains</b>(appendToFreshChain(currentChain, candidate.cert), sigChecks, opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-602">verify.go#L602</a>: 		candidateChains, err = c.<b>buildChains</b>([]*Certificate{c}, nil, &amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-730" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-730">#L730</a>: func (c *Certificate) <b>buildChains</b>(currentChain []*Certificate, sigChecks *int, opts *VerifyOptions) (chains [][]*Certificate, err error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-782" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-782">#L782</a>: 			childChains, err = candidate.cert.<b>buildChains</b>(appendToFreshChain(currentChain, candidate.cert), sigChecks, opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..Certificate.hasSANExtension^e70a1.html b/use/crypto/x509..Certificate.hasSANExtension^e70a1.html
index f8900f9e837..4a1a72f1768 100644
--- a/use/crypto/x509..Certificate.hasSANExtension^e70a1.html
+++ b/use/crypto/x509..Certificate.hasSANExtension^e70a1.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/constraints.go.html#line-537">constraints.go#L537</a>: 		if !c.<b>hasSANExtension</b>() {
-		<a href="../../src/crypto/x509/verify.go.html#line-113">verify.go#L113</a>: 	if !c.<b>hasSANExtension</b>() &amp;&amp; matchHostnames(c.Subject.CommonName, splitHostname(h.Host)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-115">verify.go#L115</a>: 	if !c.<b>hasSANExtension</b>() &amp;&amp; matchHostnames(c.Subject.CommonName, splitHostname(h.Host)) {
 		<a href="../../src/crypto/x509/x509.go.html#line-920">x509.go#L920</a>: func (c *Certificate) <b>hasSANExtension</b>() bool {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..Certificate.html b/use/crypto/x509..Certificate.html
index 042b0406558..d6fe712a570 100644
--- a/use/crypto/x509..Certificate.html
+++ b/use/crypto/x509..Certificate.html
@@ -11,7 +11,7 @@
 
 <pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a></b></span>
 
-<span class="title">132 uses</span>
+<span class="title">133 uses</span>
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-50">cert_pool.go#L50</a>: 	constraint func([]*<b>Certificate</b>) error
@@ -37,25 +37,26 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-1089" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-1089">#L1089</a>: func ParseCertificates(der []byte) ([]*<b>Certificate</b>, error) {
 		<a href="../../src/crypto/x509/parser.go.html#line-1090" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-1090">#L1090</a>: 	var certs []*<b>Certificate</b>
 		<a href="../../src/crypto/x509/root_unix.go.html#line-28">root_unix.go#L28</a>: func (c *<b>Certificate</b>) systemVerify(opts *VerifyOptions) (chains [][]*<b>Certificate</b>, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-67">verify.go#L67</a>: 	Cert   *<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-105" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-105">#L105</a>: 	Certificate *<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-147" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-147">#L147</a>: 	Cert *<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-153" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-153">#L153</a>: 	hintCert *<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-443" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-443">#L443</a>: func (c *<b>Certificate</b>) isValid(certType int, currentChain []*<b>Certificate</b>, opts *VerifyOptions) error {
-		<a href="../../src/crypto/x509/verify.go.html#line-542" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-542">#L542</a>: func (c *<b>Certificate</b>) Verify(opts VerifyOptions) ([][]*<b>Certificate</b>, error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-596" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-596">#L596</a>: 	var candidateChains [][]*<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-598" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-598">#L598</a>: 		candidateChains = [][]*<b>Certificate</b>{{c}}
-		<a href="../../src/crypto/x509/verify.go.html#line-600" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-600">#L600</a>: 		candidateChains, err = c.buildChains([]*<b>Certificate</b>{c}, nil, &amp;opts)
-		<a href="../../src/crypto/x509/verify.go.html#line-622" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-622">#L622</a>: 	candidateChains = slices.DeleteFunc(candidateChains, func(chain []*<b>Certificate</b>) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-663" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-663">#L663</a>: func appendToFreshChain(chain []*<b>Certificate</b>, cert *<b>Certificate</b>) []*<b>Certificate</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-664" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-664">#L664</a>: 	n := make([]*<b>Certificate</b>, len(chain)+1)
-		<a href="../../src/crypto/x509/verify.go.html#line-675" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-675">#L675</a>: func alreadyInChain(candidate *<b>Certificate</b>, chain []*<b>Certificate</b>) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-725" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-725">#L725</a>: func (c *<b>Certificate</b>) buildChains(currentChain []*<b>Certificate</b>, sigChecks *int, opts *VerifyOptions) (chains [][]*<b>Certificate</b>, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-728" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-728">#L728</a>: 		hintCert *<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-776" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-776">#L776</a>: 			var childChains [][]*<b>Certificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-936" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-936">#L936</a>: func (c *<b>Certificate</b>) VerifyHostname(h string) error {
-		<a href="../../src/crypto/x509/verify.go.html#line-981" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-981">#L981</a>: func checkChainForKeyUsage(chain []*<b>Certificate</b>, keyUsages []ExtKeyUsage) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-1180" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1180">#L1180</a>: func policiesValid(chain []*<b>Certificate</b>, opts VerifyOptions) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-69">verify.go#L69</a>: 	Cert   *<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-107" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-107">#L107</a>: 	Certificate *<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-149" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-149">#L149</a>: 	Cert *<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-155" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-155">#L155</a>: 	hintCert *<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-445" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-445">#L445</a>: func (c *<b>Certificate</b>) isValid(certType int, currentChain []*<b>Certificate</b>, opts *VerifyOptions) error {
+		<a href="../../src/crypto/x509/verify.go.html#line-544" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-544">#L544</a>: func (c *<b>Certificate</b>) Verify(opts VerifyOptions) ([][]*<b>Certificate</b>, error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-598" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-598">#L598</a>: 	var candidateChains [][]*<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-600" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-600">#L600</a>: 		candidateChains = [][]*<b>Certificate</b>{{c}}
+		<a href="../../src/crypto/x509/verify.go.html#line-602" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-602">#L602</a>: 		candidateChains, err = c.buildChains([]*<b>Certificate</b>{c}, nil, &amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-624" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-624">#L624</a>: 	candidateChains = slices.DeleteFunc(candidateChains, func(chain []*<b>Certificate</b>) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-668" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-668">#L668</a>: func appendToFreshChain(chain []*<b>Certificate</b>, cert *<b>Certificate</b>) []*<b>Certificate</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-669" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-669">#L669</a>: 	n := make([]*<b>Certificate</b>, len(chain)+1)
+		<a href="../../src/crypto/x509/verify.go.html#line-680" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-680">#L680</a>: func alreadyInChain(candidate *<b>Certificate</b>, chain []*<b>Certificate</b>) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-730" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-730">#L730</a>: func (c *<b>Certificate</b>) buildChains(currentChain []*<b>Certificate</b>, sigChecks *int, opts *VerifyOptions) (chains [][]*<b>Certificate</b>, err error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-733" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-733">#L733</a>: 		hintCert *<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-781" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-781">#L781</a>: 			var childChains [][]*<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-941" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-941">#L941</a>: func (c *<b>Certificate</b>) VerifyHostname(h string) error {
+		<a href="../../src/crypto/x509/verify.go.html#line-986" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-986">#L986</a>: func checkChainForKeyUsage(chain []*<b>Certificate</b>, keyUsages []ExtKeyUsage) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-1185" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1185">#L1185</a>: func policiesValid(chain []*<b>Certificate</b>, opts VerifyOptions) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-1422" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1422">#L1422</a>: func containsDistrustedSPKIHash(chain []*<b>Certificate</b>) bool {
 		<a href="../../src/crypto/x509/x509.go.html#line-704">x509.go#L704</a>: type <b>Certificate</b> struct {
 		<a href="../../src/crypto/x509/x509.go.html#line-913" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-913">#L913</a>: func (c *<b>Certificate</b>) Equal(other *<b>Certificate</b>) bool {
 		<a href="../../src/crypto/x509/x509.go.html#line-920" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-920">#L920</a>: func (c *<b>Certificate</b>) hasSANExtension() bool {
diff --git a/use/crypto/x509..Certificate.isValid^5339b.html b/use/crypto/x509..Certificate.isValid^5339b.html
index b3a76964dd4..3a8c10fb973 100644
--- a/use/crypto/x509..Certificate.isValid^5339b.html
+++ b/use/crypto/x509..Certificate.isValid^5339b.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-443">isValid</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/x509.go.html#line-704">Certificate</a>.<a href="../../src/crypto/x509/verify.go.html#line-445">isValid</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-443">verify.go#L443</a>: func (c *Certificate) <b>isValid</b>(certType int, currentChain []*Certificate, opts *VerifyOptions) error {
-		<a href="../../src/crypto/x509/verify.go.html#line-584" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-584">#L584</a>: 	err := c.<b>isValid</b>(leafCertificate, nil, &amp;opts)
-		<a href="../../src/crypto/x509/verify.go.html#line-753" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-753">#L753</a>: 		err = candidate.cert.<b>isValid</b>(certType, currentChain, opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-445">verify.go#L445</a>: func (c *Certificate) <b>isValid</b>(certType int, currentChain []*Certificate, opts *VerifyOptions) error {
+		<a href="../../src/crypto/x509/verify.go.html#line-586" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-586">#L586</a>: 	err := c.<b>isValid</b>(leafCertificate, nil, &amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-758" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-758">#L758</a>: 		err = candidate.cert.<b>isValid</b>(certType, currentChain, opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..Certificate.systemVerify^8b54b.html b/use/crypto/x509..Certificate.systemVerify^8b54b.html
index 478f414f4ed..4058c97a186 100644
--- a/use/crypto/x509..Certificate.systemVerify^8b54b.html
+++ b/use/crypto/x509..Certificate.systemVerify^8b54b.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/root_unix.go.html#line-28">root_unix.go#L28</a>: func (c *Certificate) <b>systemVerify</b>(opts *VerifyOptions) (chains [][]*Certificate, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-564">verify.go#L564</a>: 			return c.<b>systemVerify</b>(&amp;opts)
-		<a href="../../src/crypto/x509/verify.go.html#line-567" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-567">#L567</a>: 			platformChains, err := c.<b>systemVerify</b>(&amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-566">verify.go#L566</a>: 			return c.<b>systemVerify</b>(&amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-569" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-569">#L569</a>: 			platformChains, err := c.<b>systemVerify</b>(&amp;opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertificateInvalidError.Cert.html b/use/crypto/x509..CertificateInvalidError.Cert.html
index 3340bb71ead..ed0f1930b27 100644
--- a/use/crypto/x509..CertificateInvalidError.Cert.html
+++ b/use/crypto/x509..CertificateInvalidError.Cert.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-67">Cert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-69">Cert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-67">verify.go#L67</a>: 	<b>Cert</b>   *Certificate
-		<a href="../../src/crypto/x509/verify.go.html#line-461" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-461">#L461</a>: 			<b>Cert</b>:   c,
-		<a href="../../src/crypto/x509/verify.go.html#line-467" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-467">#L467</a>: 			<b>Cert</b>:   c,
+		<a href="../../src/crypto/x509/verify.go.html#line-69">verify.go#L69</a>: 	<b>Cert</b>   *Certificate
+		<a href="../../src/crypto/x509/verify.go.html#line-463" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-463">#L463</a>: 			<b>Cert</b>:   c,
+		<a href="../../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			<b>Cert</b>:   c,
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertificateInvalidError.Detail.html b/use/crypto/x509..CertificateInvalidError.Detail.html
index 82547be37d0..5e1ecea81d1 100644
--- a/use/crypto/x509..CertificateInvalidError.Detail.html
+++ b/use/crypto/x509..CertificateInvalidError.Detail.html
@@ -9,20 +9,20 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-69">Detail</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-71">Detail</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">9 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-69">verify.go#L69</a>: 	<b>Detail</b> string
-		<a href="../../src/crypto/x509/verify.go.html#line-77" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-77">#L77</a>: 		return "x509: certificate has expired or is not yet valid: " + e.<b>Detail</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-79" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-79">#L79</a>: 		return "x509: a root or intermediate certificate is not authorized to sign for this name: " + e.<b>Detail</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-81" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-81">#L81</a>: 		return "x509: a root or intermediate certificate is not authorized for an extended key usage: " + e.<b>Detail</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-91" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-91">#L91</a>: 		return "x509: issuer has name constraints but leaf contains unknown or unconstrained name: " + e.<b>Detail</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-94" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-94">#L94</a>: 		if e.<b>Detail</b> != "" {
-		<a href="../../src/crypto/x509/verify.go.html#line-95" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-95">#L95</a>: 			s = fmt.Sprintf("%s: %s", s, e.<b>Detail</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-463" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-463">#L463</a>: 			<b>Detail</b>: fmt.Sprintf("current time %s is before %s", now.Format(time.RFC3339), c.NotBefore.Format(time.RFC3339)),
-		<a href="../../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			<b>Detail</b>: fmt.Sprintf("current time %s is after %s", now.Format(time.RFC3339), c.NotAfter.Format(time.RFC3339)),
+		<a href="../../src/crypto/x509/verify.go.html#line-71">verify.go#L71</a>: 	<b>Detail</b> string
+		<a href="../../src/crypto/x509/verify.go.html#line-79" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-79">#L79</a>: 		return "x509: certificate has expired or is not yet valid: " + e.<b>Detail</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-81" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-81">#L81</a>: 		return "x509: a root or intermediate certificate is not authorized to sign for this name: " + e.<b>Detail</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-83" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-83">#L83</a>: 		return "x509: a root or intermediate certificate is not authorized for an extended key usage: " + e.<b>Detail</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-93" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-93">#L93</a>: 		return "x509: issuer has name constraints but leaf contains unknown or unconstrained name: " + e.<b>Detail</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-96" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-96">#L96</a>: 		if e.<b>Detail</b> != "" {
+		<a href="../../src/crypto/x509/verify.go.html#line-97" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-97">#L97</a>: 			s = fmt.Sprintf("%s: %s", s, e.<b>Detail</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-465" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-465">#L465</a>: 			<b>Detail</b>: fmt.Sprintf("current time %s is before %s", now.Format(time.RFC3339), c.NotBefore.Format(time.RFC3339)),
+		<a href="../../src/crypto/x509/verify.go.html#line-471" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-471">#L471</a>: 			<b>Detail</b>: fmt.Sprintf("current time %s is after %s", now.Format(time.RFC3339), c.NotAfter.Format(time.RFC3339)),
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertificateInvalidError.Error.html b/use/crypto/x509..CertificateInvalidError.Error.html
index b5c5ee34860..8a3b3d35cb1 100644
--- a/use/crypto/x509..CertificateInvalidError.Error.html
+++ b/use/crypto/x509..CertificateInvalidError.Error.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-72">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.CertificateInvalidError.html#name-Error">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-74">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.CertificateInvalidError.html#name-Error">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-72">verify.go#L72</a>: func (e CertificateInvalidError) <b>Error</b>() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-74">verify.go#L74</a>: func (e CertificateInvalidError) <b>Error</b>() string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..CertificateInvalidError.Reason.html b/use/crypto/x509..CertificateInvalidError.Reason.html
index 2d14f7be117..acdffff77db 100644
--- a/use/crypto/x509..CertificateInvalidError.Reason.html
+++ b/use/crypto/x509..CertificateInvalidError.Reason.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">Reason</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a>.<a href="../../src/crypto/x509/verify.go.html#line-70">Reason</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">6 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-68">verify.go#L68</a>: 	<b>Reason</b> InvalidReason
-		<a href="../../src/crypto/x509/verify.go.html#line-73" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-73">#L73</a>: 	switch e.<b>Reason</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-462" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-462">#L462</a>: 			<b>Reason</b>: Expired,
-		<a href="../../src/crypto/x509/verify.go.html#line-468" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-468">#L468</a>: 			<b>Reason</b>: Expired,
+		<a href="../../src/crypto/x509/verify.go.html#line-70">verify.go#L70</a>: 	<b>Reason</b> InvalidReason
+		<a href="../../src/crypto/x509/verify.go.html#line-75" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-75">#L75</a>: 	switch e.<b>Reason</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-464" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-464">#L464</a>: 			<b>Reason</b>: Expired,
+		<a href="../../src/crypto/x509/verify.go.html#line-470" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-470">#L470</a>: 			<b>Reason</b>: Expired,
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_server.go.html#line-989">handshake_server.go#L989</a>: 			} else if errCertificateInvalid, ok := errors.AsType[x509.CertificateInvalidError](err); ok &amp;&amp; errCertificateInvalid.<b>Reason</b> == x509.Expired {
diff --git a/use/crypto/x509..CertificateInvalidError.html b/use/crypto/x509..CertificateInvalidError.html
index d2098cd8506..7aaf30ce952 100644
--- a/use/crypto/x509..CertificateInvalidError.html
+++ b/use/crypto/x509..CertificateInvalidError.html
@@ -9,21 +9,21 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-66">CertificateInvalidError</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-68">CertificateInvalidError</a></b></span>
 
 <span class="title">12 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-66">verify.go#L66</a>: type <b>CertificateInvalidError</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-72" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-72">#L72</a>: func (e <b>CertificateInvalidError</b>) Error() string {
-		<a href="../../src/crypto/x509/verify.go.html#line-451" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-451">#L451</a>: 			return <b>CertificateInvalidError</b>{c, NameMismatch, ""}
-		<a href="../../src/crypto/x509/verify.go.html#line-460" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-460">#L460</a>: 		return <b>CertificateInvalidError</b>{
-		<a href="../../src/crypto/x509/verify.go.html#line-466" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-466">#L466</a>: 		return <b>CertificateInvalidError</b>{
-		<a href="../../src/crypto/x509/verify.go.html#line-497" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-497">#L497</a>: 		return <b>CertificateInvalidError</b>{c, NotAuthorizedToSign, ""}
-		<a href="../../src/crypto/x509/verify.go.html#line-503" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-503">#L503</a>: 			return <b>CertificateInvalidError</b>{c, TooManyIntermediates, ""}
-		<a href="../../src/crypto/x509/verify.go.html#line-635" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-635">#L635</a>: 				constraintsHintErr = <b>CertificateInvalidError</b>{c, CANotAuthorizedForThisName, err.Error()}
-		<a href="../../src/crypto/x509/verify.go.html#line-649" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-649">#L649</a>: 				return nil, <b>CertificateInvalidError</b>{c, IncompatibleUsage, ""}
-		<a href="../../src/crypto/x509/verify.go.html#line-656" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-656">#L656</a>: 		err = <b>CertificateInvalidError</b>{c, NoValidChains, strings.Join(details, ", ")}
+		<a href="../../src/crypto/x509/verify.go.html#line-68">verify.go#L68</a>: type <b>CertificateInvalidError</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-74" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-74">#L74</a>: func (e <b>CertificateInvalidError</b>) Error() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-453" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-453">#L453</a>: 			return <b>CertificateInvalidError</b>{c, NameMismatch, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-462" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-462">#L462</a>: 		return <b>CertificateInvalidError</b>{
+		<a href="../../src/crypto/x509/verify.go.html#line-468" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-468">#L468</a>: 		return <b>CertificateInvalidError</b>{
+		<a href="../../src/crypto/x509/verify.go.html#line-499" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-499">#L499</a>: 		return <b>CertificateInvalidError</b>{c, NotAuthorizedToSign, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-505" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-505">#L505</a>: 			return <b>CertificateInvalidError</b>{c, TooManyIntermediates, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-637" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-637">#L637</a>: 				constraintsHintErr = <b>CertificateInvalidError</b>{c, CANotAuthorizedForThisName, err.Error()}
+		<a href="../../src/crypto/x509/verify.go.html#line-654" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-654">#L654</a>: 				return nil, <b>CertificateInvalidError</b>{c, IncompatibleUsage, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-661" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-661">#L661</a>: 		err = <b>CertificateInvalidError</b>{c, NoValidChains, strings.Join(details, ", ")}
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_server.go.html#line-989">handshake_server.go#L989</a>: 			} else if errCertificateInvalid, ok := errors.AsType[x509.<b>CertificateInvalidError</b>](err); ok &amp;&amp; errCertificateInvalid.Reason == x509.Expired {
diff --git a/use/crypto/x509..Expired.html b/use/crypto/x509..Expired.html
index 30c84ad22cf..cdcacb36188 100644
--- a/use/crypto/x509..Expired.html
+++ b/use/crypto/x509..Expired.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-31">Expired</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-33">Expired</a></b></span>
 
 <span class="title">6 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-31">verify.go#L31</a>: 	<b>Expired</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-76" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-76">#L76</a>: 	case <b>Expired</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-462" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-462">#L462</a>: 			Reason: <b>Expired</b>,
-		<a href="../../src/crypto/x509/verify.go.html#line-468" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-468">#L468</a>: 			Reason: <b>Expired</b>,
+		<a href="../../src/crypto/x509/verify.go.html#line-33">verify.go#L33</a>: 	<b>Expired</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-78" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-78">#L78</a>: 	case <b>Expired</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-464" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-464">#L464</a>: 			Reason: <b>Expired</b>,
+		<a href="../../src/crypto/x509/verify.go.html#line-470" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-470">#L470</a>: 			Reason: <b>Expired</b>,
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_server.go.html#line-989">handshake_server.go#L989</a>: 			} else if errCertificateInvalid, ok := errors.AsType[x509.CertificateInvalidError](err); ok &amp;&amp; errCertificateInvalid.Reason == x509.<b>Expired</b> {
diff --git a/use/crypto/x509..ExtKeyUsage.html b/use/crypto/x509..ExtKeyUsage.html
index b49fa217fc1..ad1d004cf09 100644
--- a/use/crypto/x509..ExtKeyUsage.html
+++ b/use/crypto/x509..ExtKeyUsage.html
@@ -16,10 +16,10 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/parser.go.html#line-463">parser.go#L463</a>: func parseExtKeyUsageExtension(der cryptobyte.String) ([]<b>ExtKeyUsage</b>, []asn1.ObjectIdentifier, error) {
 		<a href="../../src/crypto/x509/parser.go.html#line-464" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-464">#L464</a>: 	var extKeyUsages []<b>ExtKeyUsage</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-212">verify.go#L212</a>: 	KeyUsages []<b>ExtKeyUsage</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-616" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-616">#L616</a>: 		opts.KeyUsages = []<b>ExtKeyUsage</b>{ExtKeyUsageServerAuth}
-		<a href="../../src/crypto/x509/verify.go.html#line-981" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-981">#L981</a>: func checkChainForKeyUsage(chain []*Certificate, keyUsages []<b>ExtKeyUsage</b>) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-982" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-982">#L982</a>: 	usages := make([]<b>ExtKeyUsage</b>, len(keyUsages))
+		<a href="../../src/crypto/x509/verify.go.html#line-214">verify.go#L214</a>: 	KeyUsages []<b>ExtKeyUsage</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-618" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-618">#L618</a>: 		opts.KeyUsages = []<b>ExtKeyUsage</b>{ExtKeyUsageServerAuth}
+		<a href="../../src/crypto/x509/verify.go.html#line-986" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-986">#L986</a>: func checkChainForKeyUsage(chain []*Certificate, keyUsages []<b>ExtKeyUsage</b>) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-987" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-987">#L987</a>: 	usages := make([]<b>ExtKeyUsage</b>, len(keyUsages))
 		<a href="../../src/crypto/x509/x509.go.html#line-632">x509.go#L632</a>: type <b>ExtKeyUsage</b> int
 		<a href="../../src/crypto/x509/x509.go.html#line-635" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-635">#L635</a>: 	ExtKeyUsageAny                            <b>ExtKeyUsage</b> = iota // anyExtendedKeyUsage
 		<a href="../../src/crypto/x509/x509.go.html#line-653" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-653">#L653</a>: 	extKeyUsage <b>ExtKeyUsage</b>
diff --git a/use/crypto/x509..ExtKeyUsageAny.html b/use/crypto/x509..ExtKeyUsageAny.html
index 9c18c0b2bb7..4ddce0f02b1 100644
--- a/use/crypto/x509..ExtKeyUsageAny.html
+++ b/use/crypto/x509..ExtKeyUsageAny.html
@@ -14,8 +14,8 @@
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-608">verify.go#L608</a>: 		if eku == <b>ExtKeyUsageAny</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1004" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1004">#L1004</a>: 			if usage == <b>ExtKeyUsageAny</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-610">verify.go#L610</a>: 		if eku == <b>ExtKeyUsageAny</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1009" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1009">#L1009</a>: 			if usage == <b>ExtKeyUsageAny</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-635">x509.go#L635</a>: 	<b>ExtKeyUsageAny</b>                            ExtKeyUsage = iota // anyExtendedKeyUsage
 		<a href="../../src/crypto/x509/x509.go.html#line-656" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-656">#L656</a>: 	{<b>ExtKeyUsageAny</b>, oidExtKeyUsageAny},
 		<a href="../../src/crypto/x509/x509_string.go.html#line-64">x509_string.go#L64</a>: 	_ = x[<b>ExtKeyUsageAny</b>-0]
diff --git a/use/crypto/x509..ExtKeyUsageServerAuth.html b/use/crypto/x509..ExtKeyUsageServerAuth.html
index 3ff8139fc5d..3d60d37d213 100644
--- a/use/crypto/x509..ExtKeyUsageServerAuth.html
+++ b/use/crypto/x509..ExtKeyUsageServerAuth.html
@@ -14,7 +14,7 @@
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-616">verify.go#L616</a>: 		opts.KeyUsages = []ExtKeyUsage{<b>ExtKeyUsageServerAuth</b>}
+		<a href="../../src/crypto/x509/verify.go.html#line-618">verify.go#L618</a>: 		opts.KeyUsages = []ExtKeyUsage{<b>ExtKeyUsageServerAuth</b>}
 		<a href="../../src/crypto/x509/x509.go.html#line-636">x509.go#L636</a>: 	<b>ExtKeyUsageServerAuth</b>                                        // serverAuth
 		<a href="../../src/crypto/x509/x509.go.html#line-657" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-657">#L657</a>: 	{<b>ExtKeyUsageServerAuth</b>, oidExtKeyUsageServerAuth},
 		<a href="../../src/crypto/x509/x509_string.go.html#line-65">x509_string.go#L65</a>: 	_ = x[<b>ExtKeyUsageServerAuth</b>-1]
diff --git a/use/crypto/x509..HostnameError.Certificate.html b/use/crypto/x509..HostnameError.Certificate.html
index a1ef000bc09..6d27093f09d 100644
--- a/use/crypto/x509..HostnameError.Certificate.html
+++ b/use/crypto/x509..HostnameError.Certificate.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-105">Certificate</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-107">Certificate</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-105">verify.go#L105</a>: 	<b>Certificate</b> *Certificate
-		<a href="../../src/crypto/x509/verify.go.html#line-110" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-110">#L110</a>: 	c := h.<b>Certificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-107">verify.go#L107</a>: 	<b>Certificate</b> *Certificate
+		<a href="../../src/crypto/x509/verify.go.html#line-112" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-112">#L112</a>: 	c := h.<b>Certificate</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..HostnameError.Error.html b/use/crypto/x509..HostnameError.Error.html
index 7690e00c5c6..2bb70b85ed5 100644
--- a/use/crypto/x509..HostnameError.Error.html
+++ b/use/crypto/x509..HostnameError.Error.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-109">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.HostnameError.html#name-Error">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-111">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.HostnameError.html#name-Error">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-109">verify.go#L109</a>: func (h HostnameError) <b>Error</b>() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-111">verify.go#L111</a>: func (h HostnameError) <b>Error</b>() string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..HostnameError.Host.html b/use/crypto/x509..HostnameError.Host.html
index 1b20ee3090b..be225d2f8b0 100644
--- a/use/crypto/x509..HostnameError.Host.html
+++ b/use/crypto/x509..HostnameError.Host.html
@@ -9,19 +9,19 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-106">Host</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a>.<a href="../../src/crypto/x509/verify.go.html#line-108">Host</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">8 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-106">verify.go#L106</a>: 	<b>Host</b>        string
-		<a href="../../src/crypto/x509/verify.go.html#line-113" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-113">#L113</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.CommonName, splitHostname(h.<b>Host</b>)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-118">#L118</a>: 	if ip := net.ParseIP(h.<b>Host</b>); ip != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-121" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-121">#L121</a>: 			return "x509: cannot validate certificate for " + h.<b>Host</b> + " because it doesn't contain any IP SANs"
-		<a href="../../src/crypto/x509/verify.go.html#line-124" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-124">#L124</a>: 			return fmt.Sprintf("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.IPAddresses), h.<b>Host</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-134" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-134">#L134</a>: 			return fmt.Sprintf("x509: certificate is valid for %d names, but none matched %s", len(c.DNSNames), h.<b>Host</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-140" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-140">#L140</a>: 		return "x509: certificate is not valid for any names, but wanted to match " + h.<b>Host</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-142" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-142">#L142</a>: 	return "x509: certificate is valid for " + valid.String() + ", not " + h.<b>Host</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-108">verify.go#L108</a>: 	<b>Host</b>        string
+		<a href="../../src/crypto/x509/verify.go.html#line-115" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-115">#L115</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.CommonName, splitHostname(h.<b>Host</b>)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-120" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-120">#L120</a>: 	if ip := net.ParseIP(h.<b>Host</b>); ip != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-123" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-123">#L123</a>: 			return "x509: cannot validate certificate for " + h.<b>Host</b> + " because it doesn't contain any IP SANs"
+		<a href="../../src/crypto/x509/verify.go.html#line-126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-126">#L126</a>: 			return fmt.Sprintf("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.IPAddresses), h.<b>Host</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-136" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-136">#L136</a>: 			return fmt.Sprintf("x509: certificate is valid for %d names, but none matched %s", len(c.DNSNames), h.<b>Host</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-142" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-142">#L142</a>: 		return "x509: certificate is not valid for any names, but wanted to match " + h.<b>Host</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-144" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-144">#L144</a>: 	return "x509: certificate is valid for " + valid.String() + ", not " + h.<b>Host</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..HostnameError.html b/use/crypto/x509..HostnameError.html
index ed0b7e52088..af062a1ff1c 100644
--- a/use/crypto/x509..HostnameError.html
+++ b/use/crypto/x509..HostnameError.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-104">HostnameError</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-106">HostnameError</a></b></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-104">verify.go#L104</a>: type <b>HostnameError</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-109" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-109">#L109</a>: func (h <b>HostnameError</b>) Error() string {
-		<a href="../../src/crypto/x509/verify.go.html#line-950" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-950">#L950</a>: 		return <b>HostnameError</b>{c, candidateIP}
-		<a href="../../src/crypto/x509/verify.go.html#line-974" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-974">#L974</a>: 	return <b>HostnameError</b>{c, h}
+		<a href="../../src/crypto/x509/verify.go.html#line-106">verify.go#L106</a>: type <b>HostnameError</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-111" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-111">#L111</a>: func (h <b>HostnameError</b>) Error() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-955" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-955">#L955</a>: 		return <b>HostnameError</b>{c, candidateIP}
+		<a href="../../src/crypto/x509/verify.go.html#line-979" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-979">#L979</a>: 	return <b>HostnameError</b>{c, h}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..IncompatibleUsage.html b/use/crypto/x509..IncompatibleUsage.html
index 540bc302dca..6d4d043081f 100644
--- a/use/crypto/x509..IncompatibleUsage.html
+++ b/use/crypto/x509..IncompatibleUsage.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-41">IncompatibleUsage</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-43">IncompatibleUsage</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-41">verify.go#L41</a>: 	<b>IncompatibleUsage</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-84" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-84">#L84</a>: 	case <b>IncompatibleUsage</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-649" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-649">#L649</a>: 				return nil, CertificateInvalidError{c, <b>IncompatibleUsage</b>, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-43">verify.go#L43</a>: 	<b>IncompatibleUsage</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-86" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-86">#L86</a>: 	case <b>IncompatibleUsage</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-654" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-654">#L654</a>: 				return nil, CertificateInvalidError{c, <b>IncompatibleUsage</b>, ""}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..InvalidReason.html b/use/crypto/x509..InvalidReason.html
index 0e0f2d70f93..9dde9884859 100644
--- a/use/crypto/x509..InvalidReason.html
+++ b/use/crypto/x509..InvalidReason.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-23">InvalidReason</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-25">InvalidReason</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-23">verify.go#L23</a>: type <b>InvalidReason</b> int
-		<a href="../../src/crypto/x509/verify.go.html#line-28" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-28">#L28</a>: 	NotAuthorizedToSign <b>InvalidReason</b> = iota
-		<a href="../../src/crypto/x509/verify.go.html#line-68" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-68">#L68</a>: 	Reason <b>InvalidReason</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-25">verify.go#L25</a>: type <b>InvalidReason</b> int
+		<a href="../../src/crypto/x509/verify.go.html#line-30" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-30">#L30</a>: 	NotAuthorizedToSign <b>InvalidReason</b> = iota
+		<a href="../../src/crypto/x509/verify.go.html#line-70" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-70">#L70</a>: 	Reason <b>InvalidReason</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..NameConstraintsWithoutSANs.html b/use/crypto/x509..NameConstraintsWithoutSANs.html
index ae1f9f59990..7ee7cc0a8ba 100644
--- a/use/crypto/x509..NameConstraintsWithoutSANs.html
+++ b/use/crypto/x509..NameConstraintsWithoutSANs.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-46">NameConstraintsWithoutSANs</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-48">NameConstraintsWithoutSANs</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-46">verify.go#L46</a>: 	<b>NameConstraintsWithoutSANs</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-88" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-88">#L88</a>: 	case <b>NameConstraintsWithoutSANs</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-48">verify.go#L48</a>: 	<b>NameConstraintsWithoutSANs</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-90" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-90">#L90</a>: 	case <b>NameConstraintsWithoutSANs</b>:
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..NameMismatch.html b/use/crypto/x509..NameMismatch.html
index 7aabff7e240..208594c1af0 100644
--- a/use/crypto/x509..NameMismatch.html
+++ b/use/crypto/x509..NameMismatch.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-44">NameMismatch</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-46">NameMismatch</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-44">verify.go#L44</a>: 	<b>NameMismatch</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-86" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-86">#L86</a>: 	case <b>NameMismatch</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-451" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-451">#L451</a>: 			return CertificateInvalidError{c, <b>NameMismatch</b>, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-46">verify.go#L46</a>: 	<b>NameMismatch</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-88" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-88">#L88</a>: 	case <b>NameMismatch</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-453" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-453">#L453</a>: 			return CertificateInvalidError{c, <b>NameMismatch</b>, ""}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..NoValidChains.html b/use/crypto/x509..NoValidChains.html
index 08e14bca352..1b9ad89d43f 100644
--- a/use/crypto/x509..NoValidChains.html
+++ b/use/crypto/x509..NoValidChains.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-61">NoValidChains</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-63">NoValidChains</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-61">verify.go#L61</a>: 	<b>NoValidChains</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-92" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-92">#L92</a>: 	case <b>NoValidChains</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-656" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-656">#L656</a>: 		err = CertificateInvalidError{c, <b>NoValidChains</b>, strings.Join(details, ", ")}
+		<a href="../../src/crypto/x509/verify.go.html#line-63">verify.go#L63</a>: 	<b>NoValidChains</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-94" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-94">#L94</a>: 	case <b>NoValidChains</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-661" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-661">#L661</a>: 		err = CertificateInvalidError{c, <b>NoValidChains</b>, strings.Join(details, ", ")}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..NotAuthorizedToSign.html b/use/crypto/x509..NotAuthorizedToSign.html
index dff5bf435df..568f4c612ec 100644
--- a/use/crypto/x509..NotAuthorizedToSign.html
+++ b/use/crypto/x509..NotAuthorizedToSign.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-28">NotAuthorizedToSign</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-30">NotAuthorizedToSign</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-28">verify.go#L28</a>: 	<b>NotAuthorizedToSign</b> InvalidReason = iota
-		<a href="../../src/crypto/x509/verify.go.html#line-74" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-74">#L74</a>: 	case <b>NotAuthorizedToSign</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-497" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-497">#L497</a>: 		return CertificateInvalidError{c, <b>NotAuthorizedToSign</b>, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-30">verify.go#L30</a>: 	<b>NotAuthorizedToSign</b> InvalidReason = iota
+		<a href="../../src/crypto/x509/verify.go.html#line-76" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-76">#L76</a>: 	case <b>NotAuthorizedToSign</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-499" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-499">#L499</a>: 		return CertificateInvalidError{c, <b>NotAuthorizedToSign</b>, ""}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..OID.Equal.html b/use/crypto/x509..OID.Equal.html
index c65f6b42459..d43ba376ddd 100644
--- a/use/crypto/x509..OID.Equal.html
+++ b/use/crypto/x509..OID.Equal.html
@@ -15,10 +15,10 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/oid.go.html#line-209">oid.go#L209</a>: func (oid OID) <b>Equal</b>(other OID) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-1139">verify.go#L1139</a>: 			if n.validPolicy.<b>Equal</b>(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1145" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1145">#L1145</a>: 					if p.validPolicy.<b>Equal</b>(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1244" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1244">#L1244</a>: 				if policy.<b>Equal</b>(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1293" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1293">#L1293</a>: 							if mapping.IssuerDomainPolicy.<b>Equal</b>(anyPolicyOID) || mapping.SubjectDomainPolicy.<b>Equal</b>(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1144">verify.go#L1144</a>: 			if n.validPolicy.<b>Equal</b>(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1150" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1150">#L1150</a>: 					if p.validPolicy.<b>Equal</b>(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1249" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1249">#L1249</a>: 				if policy.<b>Equal</b>(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1298" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1298">#L1298</a>: 							if mapping.IssuerDomainPolicy.<b>Equal</b>(anyPolicyOID) || mapping.SubjectDomainPolicy.<b>Equal</b>(anyPolicyOID) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..OID.der^5050d.html b/use/crypto/x509..OID.der^5050d.html
index 1aa3661949f..3bd69ff0371 100644
--- a/use/crypto/x509..OID.der^5050d.html
+++ b/use/crypto/x509..OID.der^5050d.html
@@ -24,28 +24,28 @@
 		<a href="../../src/crypto/x509/oid.go.html#line-305" class="path-duplicate">oid.go</a><a href="../../src/crypto/x509/oid.go.html#line-305">#L305</a>: 	for i, v := range oid.<b>der</b> {
 		<a href="../../src/crypto/x509/oid.go.html#line-359" class="path-duplicate">oid.go</a><a href="../../src/crypto/x509/oid.go.html#line-359">#L359</a>: 	out := make([]int, 0, len(oid.<b>der</b>)+1)
 		<a href="../../src/crypto/x509/oid.go.html#line-369" class="path-duplicate">oid.go</a><a href="../../src/crypto/x509/oid.go.html#line-369">#L369</a>: 	for _, v := range oid.<b>der</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1084">verify.go#L1084</a>: 		strata: []map[string]*policyGraphNode{{string(anyPolicyOID.<b>der</b>): &amp;root}},
-		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 	pg.strata[pg.depth][string(n.validPolicy.<b>der</b>)] = n
-		<a href="../../src/crypto/x509/verify.go.html#line-1096" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1096">#L1096</a>: 	return pg.parentIndex[string(expected.<b>der</b>)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1103" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1103">#L1103</a>: 	return pg.strata[pg.depth-1][string(anyPolicyOID.<b>der</b>)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1118">#L1118</a>: 	return pg.strata[pg.depth][string(policy.<b>der</b>)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: 	n := pg.strata[pg.depth][string(policy.<b>der</b>)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1132" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1132">#L1132</a>: 	delete(pg.strata[pg.depth], string(policy.<b>der</b>))
-		<a href="../../src/crypto/x509/verify.go.html#line-1162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1162">#L1162</a>: 				delete(pg.strata[i], string(n.validPolicy.<b>der</b>))
-		<a href="../../src/crypto/x509/verify.go.html#line-1172" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1172">#L1172</a>: 			pg.parentIndex[string(e.<b>der</b>)] = append(pg.parentIndex[string(e.<b>der</b>)], n)
-		<a href="../../src/crypto/x509/verify.go.html#line-1212" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1212">#L1212</a>: 		initialUserPolicySet[string(p.<b>der</b>)] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1217" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1217">#L1217</a>: 		initialUserPolicySet[string(anyPolicyOID.<b>der</b>)] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1242" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1242">#L1242</a>: 				policies[string(policy.<b>der</b>)] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1266" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1266">#L1266</a>: 			if policies[string(anyPolicyOID.<b>der</b>)] &amp;&amp; (inhibitAnyPolicy &gt; 0 || (n-i &lt; n &amp;&amp; isSelfSigned)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1271" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1271">#L1271</a>: 						if leaves[string(expected.<b>der</b>)] == nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1272" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1272">#L1272</a>: 							missing[string(expected.<b>der</b>)] = append(missing[string(expected.<b>der</b>)], p)
-		<a href="../../src/crypto/x509/verify.go.html#line-1278" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1278">#L1278</a>: 					pg.insert(newPolicyGraphNode(OID{<b>der</b>: []byte(oidStr)}, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1297" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1297">#L1297</a>: 							mappings[string(mapping.IssuerDomainPolicy.<b>der</b>)] = append(mappings[string(mapping.IssuerDomainPolicy.<b>der</b>)], mapping.SubjectDomainPolicy)
-		<a href="../../src/crypto/x509/verify.go.html#line-1309" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1309">#L1309</a>: 						if matching := pg.leafWithPolicy(OID{<b>der</b>: []byte(issuerStr)}); matching != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1313" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1313">#L1313</a>: 							n := newPolicyGraphNode(OID{<b>der</b>: []byte(issuerStr)}, []*policyGraphNode{matching})
-		<a href="../../src/crypto/x509/verify.go.html#line-1374" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1374">#L1374</a>: 		authorityConstrainedPolicySet[string(n.validPolicy.<b>der</b>)] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1379" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1379">#L1379</a>: 	if len(initialUserPolicySet) != 1 || !initialUserPolicySet[string(anyPolicyOID.<b>der</b>)] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1387" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1387">#L1387</a>: 		if authorityConstrainedPolicySet[string(anyPolicyOID.<b>der</b>)] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1089">verify.go#L1089</a>: 		strata: []map[string]*policyGraphNode{{string(anyPolicyOID.<b>der</b>): &amp;root}},
+		<a href="../../src/crypto/x509/verify.go.html#line-1094" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1094">#L1094</a>: 	pg.strata[pg.depth][string(n.validPolicy.<b>der</b>)] = n
+		<a href="../../src/crypto/x509/verify.go.html#line-1101" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1101">#L1101</a>: 	return pg.parentIndex[string(expected.<b>der</b>)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1108" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1108">#L1108</a>: 	return pg.strata[pg.depth-1][string(anyPolicyOID.<b>der</b>)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1123" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1123">#L1123</a>: 	return pg.strata[pg.depth][string(policy.<b>der</b>)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1127" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1127">#L1127</a>: 	n := pg.strata[pg.depth][string(policy.<b>der</b>)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1137" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1137">#L1137</a>: 	delete(pg.strata[pg.depth], string(policy.<b>der</b>))
+		<a href="../../src/crypto/x509/verify.go.html#line-1167" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1167">#L1167</a>: 				delete(pg.strata[i], string(n.validPolicy.<b>der</b>))
+		<a href="../../src/crypto/x509/verify.go.html#line-1177" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1177">#L1177</a>: 			pg.parentIndex[string(e.<b>der</b>)] = append(pg.parentIndex[string(e.<b>der</b>)], n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1217" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1217">#L1217</a>: 		initialUserPolicySet[string(p.<b>der</b>)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1222" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1222">#L1222</a>: 		initialUserPolicySet[string(anyPolicyOID.<b>der</b>)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1247" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1247">#L1247</a>: 				policies[string(policy.<b>der</b>)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1271" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1271">#L1271</a>: 			if policies[string(anyPolicyOID.<b>der</b>)] &amp;&amp; (inhibitAnyPolicy &gt; 0 || (n-i &lt; n &amp;&amp; isSelfSigned)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1276" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1276">#L1276</a>: 						if leaves[string(expected.<b>der</b>)] == nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1277" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1277">#L1277</a>: 							missing[string(expected.<b>der</b>)] = append(missing[string(expected.<b>der</b>)], p)
+		<a href="../../src/crypto/x509/verify.go.html#line-1283" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1283">#L1283</a>: 					pg.insert(newPolicyGraphNode(OID{<b>der</b>: []byte(oidStr)}, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1302" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1302">#L1302</a>: 							mappings[string(mapping.IssuerDomainPolicy.<b>der</b>)] = append(mappings[string(mapping.IssuerDomainPolicy.<b>der</b>)], mapping.SubjectDomainPolicy)
+		<a href="../../src/crypto/x509/verify.go.html#line-1314" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1314">#L1314</a>: 						if matching := pg.leafWithPolicy(OID{<b>der</b>: []byte(issuerStr)}); matching != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1318" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1318">#L1318</a>: 							n := newPolicyGraphNode(OID{<b>der</b>: []byte(issuerStr)}, []*policyGraphNode{matching})
+		<a href="../../src/crypto/x509/verify.go.html#line-1379" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1379">#L1379</a>: 		authorityConstrainedPolicySet[string(n.validPolicy.<b>der</b>)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1384" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1384">#L1384</a>: 	if len(initialUserPolicySet) != 1 || !initialUserPolicySet[string(anyPolicyOID.<b>der</b>)] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1392" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1392">#L1392</a>: 		if authorityConstrainedPolicySet[string(anyPolicyOID.<b>der</b>)] {
 		<a href="../../src/crypto/x509/x509.go.html#line-1482">x509.go#L1482</a>: 						if len(v.<b>der</b>) == 0 {
 		<a href="../../src/crypto/x509/x509.go.html#line-1486" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1486">#L1486</a>: 						child.AddBytes(v.<b>der</b>)
 </code></pre><pre id="footer">
diff --git a/use/crypto/x509..OID.html b/use/crypto/x509..OID.html
index 6b182666785..f9893edaeec 100644
--- a/use/crypto/x509..OID.html
+++ b/use/crypto/x509..OID.html
@@ -40,20 +40,20 @@
 		<a href="../../src/crypto/x509/parser.go.html#line-483">parser.go#L483</a>: func parseCertificatePoliciesExtension(der cryptobyte.String) ([]<b>OID</b>, error) {
 		<a href="../../src/crypto/x509/parser.go.html#line-484" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-484">#L484</a>: 	var oids []<b>OID</b>
 		<a href="../../src/crypto/x509/parser.go.html#line-827" class="path-duplicate">parser.go</a><a href="../../src/crypto/x509/parser.go.html#line-827">#L827</a>: 					out.PolicyMappings = append(out.PolicyMappings, PolicyMapping{<b>OID</b>{issuer}, <b>OID</b>{subject}})
-		<a href="../../src/crypto/x509/verify.go.html#line-224">verify.go#L224</a>: 	CertificatePolicies []<b>OID</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1035" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1035">#L1035</a>: func mustNewOIDFromInts(ints []uint64) <b>OID</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1044" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1044">#L1044</a>: 	validPolicy       <b>OID</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1045" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1045">#L1045</a>: 	expectedPolicySet []<b>OID</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1052" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1052">#L1052</a>: func newPolicyGraphNode(valid <b>OID</b>, parents []*policyGraphNode) *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1055" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1055">#L1055</a>: 		expectedPolicySet: []<b>OID</b>{valid},
-		<a href="../../src/crypto/x509/verify.go.html#line-1078" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1078">#L1078</a>: 		expectedPolicySet: []<b>OID</b>{anyPolicyOID},
-		<a href="../../src/crypto/x509/verify.go.html#line-1092" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1092">#L1092</a>: func (pg *policyGraph) parentsWithExpected(expected <b>OID</b>) []*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1117" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1117">#L1117</a>: func (pg *policyGraph) leafWithPolicy(policy <b>OID</b>) *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1121" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1121">#L1121</a>: func (pg *policyGraph) deleteLeaf(policy <b>OID</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1278" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1278">#L1278</a>: 					pg.insert(newPolicyGraphNode(<b>OID</b>{der: []byte(oidStr)}, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1289" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1289">#L1289</a>: 					mappings := map[string][]<b>OID</b>{}
-		<a href="../../src/crypto/x509/verify.go.html#line-1309" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1309">#L1309</a>: 						if matching := pg.leafWithPolicy(<b>OID</b>{der: []byte(issuerStr)}); matching != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1313" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1313">#L1313</a>: 							n := newPolicyGraphNode(<b>OID</b>{der: []byte(issuerStr)}, []*policyGraphNode{matching})
+		<a href="../../src/crypto/x509/verify.go.html#line-226">verify.go#L226</a>: 	CertificatePolicies []<b>OID</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1040" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1040">#L1040</a>: func mustNewOIDFromInts(ints []uint64) <b>OID</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1049" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1049">#L1049</a>: 	validPolicy       <b>OID</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1050" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1050">#L1050</a>: 	expectedPolicySet []<b>OID</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1057" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1057">#L1057</a>: func newPolicyGraphNode(valid <b>OID</b>, parents []*policyGraphNode) *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1060" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1060">#L1060</a>: 		expectedPolicySet: []<b>OID</b>{valid},
+		<a href="../../src/crypto/x509/verify.go.html#line-1083" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1083">#L1083</a>: 		expectedPolicySet: []<b>OID</b>{anyPolicyOID},
+		<a href="../../src/crypto/x509/verify.go.html#line-1097" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1097">#L1097</a>: func (pg *policyGraph) parentsWithExpected(expected <b>OID</b>) []*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: func (pg *policyGraph) leafWithPolicy(policy <b>OID</b>) *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1126">#L1126</a>: func (pg *policyGraph) deleteLeaf(policy <b>OID</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1283" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1283">#L1283</a>: 					pg.insert(newPolicyGraphNode(<b>OID</b>{der: []byte(oidStr)}, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1294" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1294">#L1294</a>: 					mappings := map[string][]<b>OID</b>{}
+		<a href="../../src/crypto/x509/verify.go.html#line-1314" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1314">#L1314</a>: 						if matching := pg.leafWithPolicy(<b>OID</b>{der: []byte(issuerStr)}); matching != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1318" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1318">#L1318</a>: 							n := newPolicyGraphNode(<b>OID</b>{der: []byte(issuerStr)}, []*policyGraphNode{matching})
 		<a href="../../src/crypto/x509/x509.go.html#line-691">x509.go#L691</a>: func (eku ExtKeyUsage) OID() <b>OID</b> {
 		<a href="../../src/crypto/x509/x509.go.html#line-815" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-815">#L815</a>: 	Policies []<b>OID</b>
 		<a href="../../src/crypto/x509/x509.go.html#line-886" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-886">#L886</a>: 	IssuerDomainPolicy <b>OID</b>
diff --git a/use/crypto/x509..OIDFromInts.html b/use/crypto/x509..OIDFromInts.html
index daa1b0f69f4..e3c0f3b6f32 100644
--- a/use/crypto/x509..OIDFromInts.html
+++ b/use/crypto/x509..OIDFromInts.html
@@ -16,7 +16,7 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/oid.go.html#line-55">oid.go#L55</a>: func <b>OIDFromInts</b>(oid []uint64) (OID, error) {
 		<a href="../../src/crypto/x509/oid.go.html#line-406" class="path-duplicate">oid.go</a><a href="../../src/crypto/x509/oid.go.html#line-406">#L406</a>: 	return <b>OIDFromInts</b>(uint64OID)
-		<a href="../../src/crypto/x509/verify.go.html#line-1036">verify.go#L1036</a>: 	oid, err := <b>OIDFromInts</b>(ints)
+		<a href="../../src/crypto/x509/verify.go.html#line-1041">verify.go#L1041</a>: 	oid, err := <b>OIDFromInts</b>(ints)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..PolicyMapping.IssuerDomainPolicy.html b/use/crypto/x509..PolicyMapping.IssuerDomainPolicy.html
index 100f55a052a..bd78564f092 100644
--- a/use/crypto/x509..PolicyMapping.IssuerDomainPolicy.html
+++ b/use/crypto/x509..PolicyMapping.IssuerDomainPolicy.html
@@ -14,9 +14,9 @@
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1293">verify.go#L1293</a>: 							if mapping.<b>IssuerDomainPolicy</b>.Equal(anyPolicyOID) || mapping.SubjectDomainPolicy.Equal(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1297" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1297">#L1297</a>: 							mappings[string(mapping.<b>IssuerDomainPolicy</b>.der)] = append(mappings[string(mapping.<b>IssuerDomainPolicy</b>.der)], mapping.SubjectDomainPolicy)
-		<a href="../../src/crypto/x509/verify.go.html#line-1300" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1300">#L1300</a>: 							pg.deleteLeaf(mapping.<b>IssuerDomainPolicy</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-1298">verify.go#L1298</a>: 							if mapping.<b>IssuerDomainPolicy</b>.Equal(anyPolicyOID) || mapping.SubjectDomainPolicy.Equal(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1302" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1302">#L1302</a>: 							mappings[string(mapping.<b>IssuerDomainPolicy</b>.der)] = append(mappings[string(mapping.<b>IssuerDomainPolicy</b>.der)], mapping.SubjectDomainPolicy)
+		<a href="../../src/crypto/x509/verify.go.html#line-1305" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1305">#L1305</a>: 							pg.deleteLeaf(mapping.<b>IssuerDomainPolicy</b>)
 		<a href="../../src/crypto/x509/x509.go.html#line-886">x509.go#L886</a>: 	<b>IssuerDomainPolicy</b> OID
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..PolicyMapping.SubjectDomainPolicy.html b/use/crypto/x509..PolicyMapping.SubjectDomainPolicy.html
index e2774092f9a..546763ffbc1 100644
--- a/use/crypto/x509..PolicyMapping.SubjectDomainPolicy.html
+++ b/use/crypto/x509..PolicyMapping.SubjectDomainPolicy.html
@@ -14,8 +14,8 @@
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1293">verify.go#L1293</a>: 							if mapping.IssuerDomainPolicy.Equal(anyPolicyOID) || mapping.<b>SubjectDomainPolicy</b>.Equal(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1297" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1297">#L1297</a>: 							mappings[string(mapping.IssuerDomainPolicy.der)] = append(mappings[string(mapping.IssuerDomainPolicy.der)], mapping.<b>SubjectDomainPolicy</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-1298">verify.go#L1298</a>: 							if mapping.IssuerDomainPolicy.Equal(anyPolicyOID) || mapping.<b>SubjectDomainPolicy</b>.Equal(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1302" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1302">#L1302</a>: 							mappings[string(mapping.IssuerDomainPolicy.der)] = append(mappings[string(mapping.IssuerDomainPolicy.der)], mapping.<b>SubjectDomainPolicy</b>)
 		<a href="../../src/crypto/x509/x509.go.html#line-889">x509.go#L889</a>: 	<b>SubjectDomainPolicy</b> OID
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
diff --git a/use/crypto/x509..SystemRootsError.Err.html b/use/crypto/x509..SystemRootsError.Err.html
index 4ac2702ac5f..0cebf6f3208 100644
--- a/use/crypto/x509..SystemRootsError.Err.html
+++ b/use/crypto/x509..SystemRootsError.Err.html
@@ -9,7 +9,7 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a>.<a href="../../src/github.com/cenkalti/backoff/v4/retry.go.html#line-122">Err</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a>.<a href="../../src/github.com/cenkalti/backoff/v4/retry.go.html#line-122">Err</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">5 uses</span>
 
diff --git a/use/crypto/x509..SystemRootsError.Error.html b/use/crypto/x509..SystemRootsError.Error.html
index 28191ddc495..cea95c32ce3 100644
--- a/use/crypto/x509..SystemRootsError.Error.html
+++ b/use/crypto/x509..SystemRootsError.Error.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a>.<a href="../../src/crypto/x509/verify.go.html#line-177">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.SystemRootsError.html#name-Error">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a>.<a href="../../src/crypto/x509/verify.go.html#line-179">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.SystemRootsError.html#name-Error">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-177">verify.go#L177</a>: func (se SystemRootsError) <b>Error</b>() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-179">verify.go#L179</a>: func (se SystemRootsError) <b>Error</b>() string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..SystemRootsError.Unwrap.html b/use/crypto/x509..SystemRootsError.Unwrap.html
index 83da32d1d7b..7f080712487 100644
--- a/use/crypto/x509..SystemRootsError.Unwrap.html
+++ b/use/crypto/x509..SystemRootsError.Unwrap.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a>.<a href="../../src/crypto/x509/verify.go.html#line-185">Unwrap</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.SystemRootsError.html#name-Unwrap">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a>.<a href="../../src/crypto/x509/verify.go.html#line-187">Unwrap</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.SystemRootsError.html#name-Unwrap">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-185">verify.go#L185</a>: func (se SystemRootsError) <b>Unwrap</b>() error { return se.Err }
+		<a href="../../src/crypto/x509/verify.go.html#line-187">verify.go#L187</a>: func (se SystemRootsError) <b>Unwrap</b>() error { return se.Err }
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..SystemRootsError.html b/use/crypto/x509..SystemRootsError.html
index 5453b54501d..996fe0908ca 100644
--- a/use/crypto/x509..SystemRootsError.html
+++ b/use/crypto/x509..SystemRootsError.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-173">SystemRootsError</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-175">SystemRootsError</a></b></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-173">verify.go#L173</a>: type <b>SystemRootsError</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-177" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-177">#L177</a>: func (se <b>SystemRootsError</b>) Error() string {
-		<a href="../../src/crypto/x509/verify.go.html#line-185" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-185">#L185</a>: func (se <b>SystemRootsError</b>) Unwrap() error { return se.Err }
-		<a href="../../src/crypto/x509/verify.go.html#line-580" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-580">#L580</a>: 			return nil, <b>SystemRootsError</b>{systemRootsErr}
+		<a href="../../src/crypto/x509/verify.go.html#line-175">verify.go#L175</a>: type <b>SystemRootsError</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-179" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-179">#L179</a>: func (se <b>SystemRootsError</b>) Error() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-187" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-187">#L187</a>: func (se <b>SystemRootsError</b>) Unwrap() error { return se.Err }
+		<a href="../../src/crypto/x509/verify.go.html#line-582" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-582">#L582</a>: 			return nil, <b>SystemRootsError</b>{systemRootsErr}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..TooManyConstraints.html b/use/crypto/x509..TooManyConstraints.html
index 3601a182220..7a88c64f36c 100644
--- a/use/crypto/x509..TooManyConstraints.html
+++ b/use/crypto/x509..TooManyConstraints.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-56">TooManyConstraints</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-58">TooManyConstraints</a></b></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-56">verify.go#L56</a>: 	<b>TooManyConstraints</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-58">verify.go#L58</a>: 	<b>TooManyConstraints</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..TooManyIntermediates.html b/use/crypto/x509..TooManyIntermediates.html
index fd137fe4d5a..6fab4c28ccf 100644
--- a/use/crypto/x509..TooManyIntermediates.html
+++ b/use/crypto/x509..TooManyIntermediates.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-38">TooManyIntermediates</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-40">TooManyIntermediates</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-38">verify.go#L38</a>: 	<b>TooManyIntermediates</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-82" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-82">#L82</a>: 	case <b>TooManyIntermediates</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-503" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-503">#L503</a>: 			return CertificateInvalidError{c, <b>TooManyIntermediates</b>, ""}
+		<a href="../../src/crypto/x509/verify.go.html#line-40">verify.go#L40</a>: 	<b>TooManyIntermediates</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-84" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-84">#L84</a>: 	case <b>TooManyIntermediates</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-505" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-505">#L505</a>: 			return CertificateInvalidError{c, <b>TooManyIntermediates</b>, ""}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnconstrainedName.html b/use/crypto/x509..UnconstrainedName.html
index d062dfc34d8..773897cf35a 100644
--- a/use/crypto/x509..UnconstrainedName.html
+++ b/use/crypto/x509..UnconstrainedName.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-50">UnconstrainedName</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-52">UnconstrainedName</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-50">verify.go#L50</a>: 	<b>UnconstrainedName</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-90" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-90">#L90</a>: 	case <b>UnconstrainedName</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-52">verify.go#L52</a>: 	<b>UnconstrainedName</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-92" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-92">#L92</a>: 	case <b>UnconstrainedName</b>:
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnhandledCriticalExtension.html b/use/crypto/x509..UnhandledCriticalExtension.html
index 731280687fa..c2d287053d2 100644
--- a/use/crypto/x509..UnhandledCriticalExtension.html
+++ b/use/crypto/x509..UnhandledCriticalExtension.html
@@ -14,7 +14,7 @@
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-445">verify.go#L445</a>: 		return <b>UnhandledCriticalExtension</b>{}
+		<a href="../../src/crypto/x509/verify.go.html#line-447">verify.go#L447</a>: 		return <b>UnhandledCriticalExtension</b>{}
 		<a href="../../src/crypto/x509/x509.go.html#line-1052">x509.go#L1052</a>: type <b>UnhandledCriticalExtension</b> struct{}
 		<a href="../../src/crypto/x509/x509.go.html#line-1054" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1054">#L1054</a>: func (h <b>UnhandledCriticalExtension</b>) Error() string {
 </code></pre><pre id="footer">
diff --git a/use/crypto/x509..UnknownAuthorityError.Cert.html b/use/crypto/x509..UnknownAuthorityError.Cert.html
index 2054f2bfc18..61648727ce5 100644
--- a/use/crypto/x509..UnknownAuthorityError.Cert.html
+++ b/use/crypto/x509..UnknownAuthorityError.Cert.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-147">Cert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-149">Cert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-147">verify.go#L147</a>: 	<b>Cert</b> *Certificate
+		<a href="../../src/crypto/x509/verify.go.html#line-149">verify.go#L149</a>: 	<b>Cert</b> *Certificate
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnknownAuthorityError.Error.html b/use/crypto/x509..UnknownAuthorityError.Error.html
index 502549e8ba1..47fe09a9d32 100644
--- a/use/crypto/x509..UnknownAuthorityError.Error.html
+++ b/use/crypto/x509..UnknownAuthorityError.Error.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-156">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.UnknownAuthorityError.html#name-Error">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-158">Error</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.UnknownAuthorityError.html#name-Error">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-156">verify.go#L156</a>: func (e UnknownAuthorityError) <b>Error</b>() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-158">verify.go#L158</a>: func (e UnknownAuthorityError) <b>Error</b>() string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html b/use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html
index b36fe63216a..8e007dd06b8 100644
--- a/use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html
+++ b/use/crypto/x509..UnknownAuthorityError.hintCert^e462c.html
@@ -9,16 +9,16 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-153">hintCert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-155">hintCert</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-153">verify.go#L153</a>: 	<b>hintCert</b> *Certificate
-		<a href="../../src/crypto/x509/verify.go.html#line-159" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-159">#L159</a>: 		certName := e.<b>hintCert</b>.Subject.CommonName
-		<a href="../../src/crypto/x509/verify.go.html#line-161" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-161">#L161</a>: 			if len(e.<b>hintCert</b>.Subject.Organization) &gt; 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-162">#L162</a>: 				certName = e.<b>hintCert</b>.Subject.Organization[0]
-		<a href="../../src/crypto/x509/verify.go.html#line-164" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-164">#L164</a>: 				certName = "serial:" + e.<b>hintCert</b>.SerialNumber.String()
+		<a href="../../src/crypto/x509/verify.go.html#line-155">verify.go#L155</a>: 	<b>hintCert</b> *Certificate
+		<a href="../../src/crypto/x509/verify.go.html#line-161" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-161">#L161</a>: 		certName := e.<b>hintCert</b>.Subject.CommonName
+		<a href="../../src/crypto/x509/verify.go.html#line-163" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-163">#L163</a>: 			if len(e.<b>hintCert</b>.Subject.Organization) &gt; 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-164" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-164">#L164</a>: 				certName = e.<b>hintCert</b>.Subject.Organization[0]
+		<a href="../../src/crypto/x509/verify.go.html#line-166" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-166">#L166</a>: 				certName = "serial:" + e.<b>hintCert</b>.SerialNumber.String()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html b/use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html
index 6ffa9d45a8c..18938b7c6f7 100644
--- a/use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html
+++ b/use/crypto/x509..UnknownAuthorityError.hintErr^178d1.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-150">hintErr</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a>.<a href="../../src/crypto/x509/verify.go.html#line-152">hintErr</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-150">verify.go#L150</a>: 	<b>hintErr</b> error
-		<a href="../../src/crypto/x509/verify.go.html#line-158" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-158">#L158</a>: 	if e.<b>hintErr</b> != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-167" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-167">#L167</a>: 		s += fmt.Sprintf(" (possibly because of %q while trying to verify candidate authority certificate %q)", e.<b>hintErr</b>, certName)
+		<a href="../../src/crypto/x509/verify.go.html#line-152">verify.go#L152</a>: 	<b>hintErr</b> error
+		<a href="../../src/crypto/x509/verify.go.html#line-160" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-160">#L160</a>: 	if e.<b>hintErr</b> != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-169" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-169">#L169</a>: 		s += fmt.Sprintf(" (possibly because of %q while trying to verify candidate authority certificate %q)", e.<b>hintErr</b>, certName)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..UnknownAuthorityError.html b/use/crypto/x509..UnknownAuthorityError.html
index 8c255ea3d2c..eac857f5e4d 100644
--- a/use/crypto/x509..UnknownAuthorityError.html
+++ b/use/crypto/x509..UnknownAuthorityError.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-146">UnknownAuthorityError</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-148">UnknownAuthorityError</a></b></span>
 
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-146">verify.go#L146</a>: type <b>UnknownAuthorityError</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-156" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-156">#L156</a>: func (e <b>UnknownAuthorityError</b>) Error() string {
-		<a href="../../src/crypto/x509/verify.go.html#line-802" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-802">#L802</a>: 		err = <b>UnknownAuthorityError</b>{c, hintErr, hintCert}
+		<a href="../../src/crypto/x509/verify.go.html#line-148">verify.go#L148</a>: type <b>UnknownAuthorityError</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-158" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-158">#L158</a>: func (e <b>UnknownAuthorityError</b>) Error() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-807" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-807">#L807</a>: 		err = <b>UnknownAuthorityError</b>{c, hintErr, hintCert}
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_server.go.html#line-987">handshake_server.go#L987</a>: 			if _, ok := errors.AsType[x509.<b>UnknownAuthorityError</b>](err); ok {
diff --git a/use/crypto/x509..VerifyOptions.CertificatePolicies.html b/use/crypto/x509..VerifyOptions.CertificatePolicies.html
index 83907befefe..ea4205721a6 100644
--- a/use/crypto/x509..VerifyOptions.CertificatePolicies.html
+++ b/use/crypto/x509..VerifyOptions.CertificatePolicies.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-224">CertificatePolicies</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-226">CertificatePolicies</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-224">verify.go#L224</a>: 	<b>CertificatePolicies</b> []OID
-		<a href="../../src/crypto/x509/verify.go.html#line-1211" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1211">#L1211</a>: 	for _, p := range opts.<b>CertificatePolicies</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-226">verify.go#L226</a>: 	<b>CertificatePolicies</b> []OID
+		<a href="../../src/crypto/x509/verify.go.html#line-1216" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1216">#L1216</a>: 	for _, p := range opts.<b>CertificatePolicies</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..VerifyOptions.CurrentTime.html b/use/crypto/x509..VerifyOptions.CurrentTime.html
index cf609405587..b1fdfd81791 100644
--- a/use/crypto/x509..VerifyOptions.CurrentTime.html
+++ b/use/crypto/x509..VerifyOptions.CurrentTime.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-207">CurrentTime</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-209">CurrentTime</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">15 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-207">verify.go#L207</a>: 	<b>CurrentTime</b> time.Time
-		<a href="../../src/crypto/x509/verify.go.html#line-455" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-455">#L455</a>: 	now := opts.<b>CurrentTime</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-209">verify.go#L209</a>: 	<b>CurrentTime</b> time.Time
+		<a href="../../src/crypto/x509/verify.go.html#line-457" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-457">#L457</a>: 	now := opts.<b>CurrentTime</b>
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-1873">common.go#L1873</a>: 			return opts.<b>CurrentTime</b>.Before(cert.NotBefore) || opts.<b>CurrentTime</b>.After(cert.NotAfter)
diff --git a/use/crypto/x509..VerifyOptions.DNSName.html b/use/crypto/x509..VerifyOptions.DNSName.html
index 6b8d41c4c3a..9ecb0e1ac1a 100644
--- a/use/crypto/x509..VerifyOptions.DNSName.html
+++ b/use/crypto/x509..VerifyOptions.DNSName.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-195">DNSName</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-197">DNSName</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">9 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-195">verify.go#L195</a>: 	<b>DNSName</b> string
-		<a href="../../src/crypto/x509/verify.go.html#line-589" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-589">#L589</a>: 	if len(opts.<b>DNSName</b>) &gt; 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-590" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-590">#L590</a>: 		err = c.VerifyHostname(opts.<b>DNSName</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-197">verify.go#L197</a>: 	<b>DNSName</b> string
+		<a href="../../src/crypto/x509/verify.go.html#line-591" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-591">#L591</a>: 	if len(opts.<b>DNSName</b>) &gt; 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-592" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-592">#L592</a>: 		err = c.VerifyHostname(opts.<b>DNSName</b>)
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_client.go.html#line-1138">handshake_client.go#L1138</a>: 				<b>DNSName</b>:       c.serverName,
diff --git a/use/crypto/x509..VerifyOptions.Intermediates.html b/use/crypto/x509..VerifyOptions.Intermediates.html
index 3f91e223d09..62edaf48e8f 100644
--- a/use/crypto/x509..VerifyOptions.Intermediates.html
+++ b/use/crypto/x509..VerifyOptions.Intermediates.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-200">Intermediates</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-202">Intermediates</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">18 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-200">verify.go#L200</a>: 	<b>Intermediates</b> *CertPool
-		<a href="../../src/crypto/x509/verify.go.html#line-548" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-548">#L548</a>: 	for i := 0; i &lt; opts.<b>Intermediates</b>.len(); i++ {
-		<a href="../../src/crypto/x509/verify.go.html#line-549" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-549">#L549</a>: 		c, _, err := opts.<b>Intermediates</b>.cert(i)
-		<a href="../../src/crypto/x509/verify.go.html#line-788" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-788">#L788</a>: 		{intermediateCertificate, opts.<b>Intermediates</b>.findPotentialParents(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-202">verify.go#L202</a>: 	<b>Intermediates</b> *CertPool
+		<a href="../../src/crypto/x509/verify.go.html#line-550" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-550">#L550</a>: 	for i := 0; i &lt; opts.<b>Intermediates</b>.len(); i++ {
+		<a href="../../src/crypto/x509/verify.go.html#line-551" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-551">#L551</a>: 		c, _, err := opts.<b>Intermediates</b>.cert(i)
+		<a href="../../src/crypto/x509/verify.go.html#line-793" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-793">#L793</a>: 		{intermediateCertificate, opts.<b>Intermediates</b>.findPotentialParents(c)},
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-1885">common.go#L1885</a>: 			opts.<b>Intermediates</b> = x509.NewCertPool()
diff --git a/use/crypto/x509..VerifyOptions.KeyUsages.html b/use/crypto/x509..VerifyOptions.KeyUsages.html
index de56ed284dc..aaba7a7428c 100644
--- a/use/crypto/x509..VerifyOptions.KeyUsages.html
+++ b/use/crypto/x509..VerifyOptions.KeyUsages.html
@@ -9,16 +9,16 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-212">KeyUsages</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-214">KeyUsages</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">10 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-212">verify.go#L212</a>: 	<b>KeyUsages</b> []ExtKeyUsage
-		<a href="../../src/crypto/x509/verify.go.html#line-607" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-607">#L607</a>: 	for _, eku := range opts.<b>KeyUsages</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-615" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-615">#L615</a>: 	if len(opts.<b>KeyUsages</b>) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-616" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-616">#L616</a>: 		opts.<b>KeyUsages</b> = []ExtKeyUsage{ExtKeyUsageServerAuth}
-		<a href="../../src/crypto/x509/verify.go.html#line-629" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-629">#L629</a>: 		if !anyKeyUsage &amp;&amp; !checkChainForKeyUsage(chain, opts.<b>KeyUsages</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-214">verify.go#L214</a>: 	<b>KeyUsages</b> []ExtKeyUsage
+		<a href="../../src/crypto/x509/verify.go.html#line-609" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-609">#L609</a>: 	for _, eku := range opts.<b>KeyUsages</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-617" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-617">#L617</a>: 	if len(opts.<b>KeyUsages</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-618" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-618">#L618</a>: 		opts.<b>KeyUsages</b> = []ExtKeyUsage{ExtKeyUsageServerAuth}
+		<a href="../../src/crypto/x509/verify.go.html#line-631" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-631">#L631</a>: 		if !anyKeyUsage &amp;&amp; !checkChainForKeyUsage(chain, opts.<b>KeyUsages</b>) {
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_client.go.html#line-422">handshake_client.go#L422</a>: 			<b>KeyUsages</b>:   []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
diff --git a/use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html b/use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html
index 98ea5b685ee..8df561160fc 100644
--- a/use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html
+++ b/use/crypto/x509..VerifyOptions.MaxConstraintComparisions.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-219">MaxConstraintComparisions</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-221">MaxConstraintComparisions</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-219">verify.go#L219</a>: 	<b>MaxConstraintComparisions</b> int
+		<a href="../../src/crypto/x509/verify.go.html#line-221">verify.go#L221</a>: 	<b>MaxConstraintComparisions</b> int
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..VerifyOptions.Roots.html b/use/crypto/x509..VerifyOptions.Roots.html
index 4e823f1e335..24bde926b2f 100644
--- a/use/crypto/x509..VerifyOptions.Roots.html
+++ b/use/crypto/x509..VerifyOptions.Roots.html
@@ -9,20 +9,20 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-203">Roots</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-205">Roots</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">19 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-203">verify.go#L203</a>: 	<b>Roots</b> *CertPool
-		<a href="../../src/crypto/x509/verify.go.html#line-563" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-563">#L563</a>: 		if opts.<b>Roots</b> == nil &amp;&amp; (systemPool == nil || systemPool.systemPool) {
-		<a href="../../src/crypto/x509/verify.go.html#line-566" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-566">#L566</a>: 		if opts.<b>Roots</b> != nil &amp;&amp; opts.<b>Roots</b>.systemPool {
-		<a href="../../src/crypto/x509/verify.go.html#line-571" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-571">#L571</a>: 			if err == nil || opts.<b>Roots</b>.len() == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-577" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-577">#L577</a>: 	if opts.<b>Roots</b> == nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-578" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-578">#L578</a>: 		opts.<b>Roots</b> = systemRootsPool()
-		<a href="../../src/crypto/x509/verify.go.html#line-579" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-579">#L579</a>: 		if opts.<b>Roots</b> == nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-597" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-597">#L597</a>: 	if opts.<b>Roots</b>.contains(c) {
-		<a href="../../src/crypto/x509/verify.go.html#line-787" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-787">#L787</a>: 		{rootCertificate, opts.<b>Roots</b>.findPotentialParents(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-205">verify.go#L205</a>: 	<b>Roots</b> *CertPool
+		<a href="../../src/crypto/x509/verify.go.html#line-565" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-565">#L565</a>: 		if opts.<b>Roots</b> == nil &amp;&amp; (systemPool == nil || systemPool.systemPool) {
+		<a href="../../src/crypto/x509/verify.go.html#line-568" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-568">#L568</a>: 		if opts.<b>Roots</b> != nil &amp;&amp; opts.<b>Roots</b>.systemPool {
+		<a href="../../src/crypto/x509/verify.go.html#line-573" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-573">#L573</a>: 			if err == nil || opts.<b>Roots</b>.len() == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-579" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-579">#L579</a>: 	if opts.<b>Roots</b> == nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-580" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-580">#L580</a>: 		opts.<b>Roots</b> = systemRootsPool()
+		<a href="../../src/crypto/x509/verify.go.html#line-581" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-581">#L581</a>: 		if opts.<b>Roots</b> == nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-599" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-599">#L599</a>: 	if opts.<b>Roots</b>.contains(c) {
+		<a href="../../src/crypto/x509/verify.go.html#line-792" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-792">#L792</a>: 		{rootCertificate, opts.<b>Roots</b>.findPotentialParents(c)},
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/handshake_client.go.html#line-421">handshake_client.go#L421</a>: 			<b>Roots</b>:       c.config.RootCAs,
diff --git a/use/crypto/x509..VerifyOptions.html b/use/crypto/x509..VerifyOptions.html
index 47ecb6e6e96..66bd3d6104e 100644
--- a/use/crypto/x509..VerifyOptions.html
+++ b/use/crypto/x509..VerifyOptions.html
@@ -9,17 +9,17 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a></b></span>
 
 <span class="title">16 uses</span>
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/root_unix.go.html#line-28">root_unix.go#L28</a>: func (c *Certificate) systemVerify(opts *<b>VerifyOptions</b>) (chains [][]*Certificate, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-192">verify.go#L192</a>: type <b>VerifyOptions</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-443" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-443">#L443</a>: func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *<b>VerifyOptions</b>) error {
-		<a href="../../src/crypto/x509/verify.go.html#line-542" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-542">#L542</a>: func (c *Certificate) Verify(opts <b>VerifyOptions</b>) ([][]*Certificate, error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-725" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-725">#L725</a>: func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, opts *<b>VerifyOptions</b>) (chains [][]*Certificate, err error) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1180" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1180">#L1180</a>: func policiesValid(chain []*Certificate, opts <b>VerifyOptions</b>) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-194">verify.go#L194</a>: type <b>VerifyOptions</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-445" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-445">#L445</a>: func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *<b>VerifyOptions</b>) error {
+		<a href="../../src/crypto/x509/verify.go.html#line-544" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-544">#L544</a>: func (c *Certificate) Verify(opts <b>VerifyOptions</b>) ([][]*Certificate, error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-730" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-730">#L730</a>: func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, opts *<b>VerifyOptions</b>) (chains [][]*Certificate, err error) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1185" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1185">#L1185</a>: func policiesValid(chain []*Certificate, opts <b>VerifyOptions</b>) bool {
 
 	<a href="../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../src/crypto/tls/common.go.html#line-1867">common.go#L1867</a>: func anyValidVerifiedChain(verifiedChains [][]*x509.Certificate, opts x509.<b>VerifyOptions</b>) bool {
diff --git a/use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html b/use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html
index e7e4ad232f0..45b66d97197 100644
--- a/use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html
+++ b/use/crypto/x509..VerifyOptions.inhibitAnyPolicy^4b16e.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-240">inhibitAnyPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-242">inhibitAnyPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-240">verify.go#L240</a>: 	<b>inhibitAnyPolicy</b> bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1200" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1200">#L1200</a>: 	if !opts.<b>inhibitAnyPolicy</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-242">verify.go#L242</a>: 	<b>inhibitAnyPolicy</b> bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1205" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1205">#L1205</a>: 	if !opts.<b>inhibitAnyPolicy</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html b/use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html
index 0bca00e7d8e..620630096ea 100644
--- a/use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html
+++ b/use/crypto/x509..VerifyOptions.inhibitPolicyMapping^6a40d.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-232">inhibitPolicyMapping</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-234">inhibitPolicyMapping</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-232">verify.go#L232</a>: 	<b>inhibitPolicyMapping</b> bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1206" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1206">#L1206</a>: 	if !opts.<b>inhibitPolicyMapping</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-234">verify.go#L234</a>: 	<b>inhibitPolicyMapping</b> bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1211" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1211">#L1211</a>: 	if !opts.<b>inhibitPolicyMapping</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html b/use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html
index 02579b3d2ac..3d4c123d9b3 100644
--- a/use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html
+++ b/use/crypto/x509..VerifyOptions.requireExplicitPolicy^cb405.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-192">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-236">requireExplicitPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-194">VerifyOptions</a>.<a href="../../src/crypto/x509/verify.go.html#line-238">requireExplicitPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-236">verify.go#L236</a>: 	<b>requireExplicitPolicy</b> bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1203" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1203">#L1203</a>: 	if !opts.<b>requireExplicitPolicy</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-238">verify.go#L238</a>: 	<b>requireExplicitPolicy</b> bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1208" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1208">#L1208</a>: 	if !opts.<b>requireExplicitPolicy</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..alreadyInChain^b3059.html b/use/crypto/x509..alreadyInChain^b3059.html
index c7f0b558ac1..0335e82e60c 100644
--- a/use/crypto/x509..alreadyInChain^b3059.html
+++ b/use/crypto/x509..alreadyInChain^b3059.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-675">alreadyInChain</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-680">alreadyInChain</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-675">verify.go#L675</a>: func <b>alreadyInChain</b>(candidate *Certificate, chain []*Certificate) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-741" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-741">#L741</a>: 		if candidate.cert.PublicKey == nil || <b>alreadyInChain</b>(candidate.cert, currentChain) {
+		<a href="../../src/crypto/x509/verify.go.html#line-680">verify.go#L680</a>: func <b>alreadyInChain</b>(candidate *Certificate, chain []*Certificate) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-746" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-746">#L746</a>: 		if candidate.cert.PublicKey == nil || <b>alreadyInChain</b>(candidate.cert, currentChain) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..anyPolicyOID^08ed8.html b/use/crypto/x509..anyPolicyOID^08ed8.html
index 39e2b5bedf2..cd8191ea5c4 100644
--- a/use/crypto/x509..anyPolicyOID^08ed8.html
+++ b/use/crypto/x509..anyPolicyOID^08ed8.html
@@ -9,26 +9,26 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1073">anyPolicyOID</a></b></span>
+<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1078">anyPolicyOID</a></b></span>
 
 <span class="title">16 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1073">verify.go#L1073</a>: var <b>anyPolicyOID</b> = mustNewOIDFromInts([]uint64{2, 5, 29, 32, 0})
-		<a href="../../src/crypto/x509/verify.go.html#line-1077" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1077">#L1077</a>: 		validPolicy:       <b>anyPolicyOID</b>,
-		<a href="../../src/crypto/x509/verify.go.html#line-1078" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1078">#L1078</a>: 		expectedPolicySet: []OID{<b>anyPolicyOID</b>},
-		<a href="../../src/crypto/x509/verify.go.html#line-1084" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1084">#L1084</a>: 		strata: []map[string]*policyGraphNode{{string(<b>anyPolicyOID</b>.der): &amp;root}},
-		<a href="../../src/crypto/x509/verify.go.html#line-1103" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1103">#L1103</a>: 	return pg.strata[pg.depth-1][string(<b>anyPolicyOID</b>.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1139" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1139">#L1139</a>: 			if n.validPolicy.Equal(<b>anyPolicyOID</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1145" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1145">#L1145</a>: 					if p.validPolicy.Equal(<b>anyPolicyOID</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1217" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1217">#L1217</a>: 		initialUserPolicySet[string(<b>anyPolicyOID</b>.der)] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1244" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1244">#L1244</a>: 				if policy.Equal(<b>anyPolicyOID</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1266" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1266">#L1266</a>: 			if policies[string(<b>anyPolicyOID</b>.der)] &amp;&amp; (inhibitAnyPolicy &gt; 0 || (n-i &lt; n &amp;&amp; isSelfSigned)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1293" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1293">#L1293</a>: 							if mapping.IssuerDomainPolicy.Equal(<b>anyPolicyOID</b>) || mapping.SubjectDomainPolicy.Equal(<b>anyPolicyOID</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1311" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1311">#L1311</a>: 						} else if matching := pg.leafWithPolicy(<b>anyPolicyOID</b>); matching != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1366" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1366">#L1366</a>: 		if currentAny := pg.leafWithPolicy(<b>anyPolicyOID</b>); currentAny != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1379" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1379">#L1379</a>: 	if len(initialUserPolicySet) != 1 || !initialUserPolicySet[string(<b>anyPolicyOID</b>.der)] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1387" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1387">#L1387</a>: 		if authorityConstrainedPolicySet[string(<b>anyPolicyOID</b>.der)] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1078">verify.go#L1078</a>: var <b>anyPolicyOID</b> = mustNewOIDFromInts([]uint64{2, 5, 29, 32, 0})
+		<a href="../../src/crypto/x509/verify.go.html#line-1082" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1082">#L1082</a>: 		validPolicy:       <b>anyPolicyOID</b>,
+		<a href="../../src/crypto/x509/verify.go.html#line-1083" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1083">#L1083</a>: 		expectedPolicySet: []OID{<b>anyPolicyOID</b>},
+		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 		strata: []map[string]*policyGraphNode{{string(<b>anyPolicyOID</b>.der): &amp;root}},
+		<a href="../../src/crypto/x509/verify.go.html#line-1108" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1108">#L1108</a>: 	return pg.strata[pg.depth-1][string(<b>anyPolicyOID</b>.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1144" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1144">#L1144</a>: 			if n.validPolicy.Equal(<b>anyPolicyOID</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1150" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1150">#L1150</a>: 					if p.validPolicy.Equal(<b>anyPolicyOID</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1222" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1222">#L1222</a>: 		initialUserPolicySet[string(<b>anyPolicyOID</b>.der)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1249" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1249">#L1249</a>: 				if policy.Equal(<b>anyPolicyOID</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1271" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1271">#L1271</a>: 			if policies[string(<b>anyPolicyOID</b>.der)] &amp;&amp; (inhibitAnyPolicy &gt; 0 || (n-i &lt; n &amp;&amp; isSelfSigned)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1298" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1298">#L1298</a>: 							if mapping.IssuerDomainPolicy.Equal(<b>anyPolicyOID</b>) || mapping.SubjectDomainPolicy.Equal(<b>anyPolicyOID</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1316" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1316">#L1316</a>: 						} else if matching := pg.leafWithPolicy(<b>anyPolicyOID</b>); matching != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1371" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1371">#L1371</a>: 		if currentAny := pg.leafWithPolicy(<b>anyPolicyOID</b>); currentAny != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1384" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1384">#L1384</a>: 	if len(initialUserPolicySet) != 1 || !initialUserPolicySet[string(<b>anyPolicyOID</b>.der)] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1392" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1392">#L1392</a>: 		if authorityConstrainedPolicySet[string(<b>anyPolicyOID</b>.der)] {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..appendToFreshChain^6b596.html b/use/crypto/x509..appendToFreshChain^6b596.html
index d05504ef518..035e7a74a4e 100644
--- a/use/crypto/x509..appendToFreshChain^6b596.html
+++ b/use/crypto/x509..appendToFreshChain^6b596.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-663">appendToFreshChain</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-668">appendToFreshChain</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-663">verify.go#L663</a>: func <b>appendToFreshChain</b>(chain []*Certificate, cert *Certificate) []*Certificate {
-		<a href="../../src/crypto/x509/verify.go.html#line-774" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-774">#L774</a>: 			chains = append(chains, <b>appendToFreshChain</b>(currentChain, candidate.cert))
-		<a href="../../src/crypto/x509/verify.go.html#line-777" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-777">#L777</a>: 			childChains, err = candidate.cert.buildChains(<b>appendToFreshChain</b>(currentChain, candidate.cert), sigChecks, opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-668">verify.go#L668</a>: func <b>appendToFreshChain</b>(chain []*Certificate, cert *Certificate) []*Certificate {
+		<a href="../../src/crypto/x509/verify.go.html#line-779" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-779">#L779</a>: 			chains = append(chains, <b>appendToFreshChain</b>(currentChain, candidate.cert))
+		<a href="../../src/crypto/x509/verify.go.html#line-782" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-782">#L782</a>: 			childChains, err = candidate.cert.buildChains(<b>appendToFreshChain</b>(currentChain, candidate.cert), sigChecks, opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..checkChainConstraints^a0291.html b/use/crypto/x509..checkChainConstraints^a0291.html
index 5a753a46aa8..794c3574216 100644
--- a/use/crypto/x509..checkChainConstraints^a0291.html
+++ b/use/crypto/x509..checkChainConstraints^a0291.html
@@ -15,7 +15,7 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/constraints.go.html#line-510">constraints.go#L510</a>: func <b>checkChainConstraints</b>(chain []*Certificate) error {
-		<a href="../../src/crypto/x509/verify.go.html#line-633">verify.go#L633</a>: 		if err := <b>checkChainConstraints</b>(chain); err != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-635">verify.go#L635</a>: 		if err := <b>checkChainConstraints</b>(chain); err != nil {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..checkChainForKeyUsage^29417.html b/use/crypto/x509..checkChainForKeyUsage^29417.html
index 559e3cfe579..a8198b70df3 100644
--- a/use/crypto/x509..checkChainForKeyUsage^29417.html
+++ b/use/crypto/x509..checkChainForKeyUsage^29417.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-981">checkChainForKeyUsage</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-986">checkChainForKeyUsage</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-629">verify.go#L629</a>: 		if !anyKeyUsage &amp;&amp; !<b>checkChainForKeyUsage</b>(chain, opts.KeyUsages) {
-		<a href="../../src/crypto/x509/verify.go.html#line-981" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-981">#L981</a>: func <b>checkChainForKeyUsage</b>(chain []*Certificate, keyUsages []ExtKeyUsage) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-631">verify.go#L631</a>: 		if !anyKeyUsage &amp;&amp; !<b>checkChainForKeyUsage</b>(chain, opts.KeyUsages) {
+		<a href="../../src/crypto/x509/verify.go.html#line-986" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-986">#L986</a>: func <b>checkChainForKeyUsage</b>(chain []*Certificate, keyUsages []ExtKeyUsage) bool {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..containsDistrustedSPKIHash^66387.html b/use/crypto/x509..containsDistrustedSPKIHash^66387.html
new file mode 100644
index 00000000000..9b4bf2e7aae
--- /dev/null
+++ b/use/crypto/x509..containsDistrustedSPKIHash^66387.html
@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>References: crypto/x509.containsDistrustedSPKIHash</title>
+<link href="../../css/auto-v0.8.5.css" rel="stylesheet">
+<script src="../../jvs/golds-v0.8.5.js"></script>
+<body onload="onPageLoad()"><div>
+
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1422">containsDistrustedSPKIHash</a></b></span>
+
+<span class="title">2 uses</span>
+
+	crypto/x509 (current package)
+		<a href="../../src/crypto/x509/verify.go.html#line-641">verify.go#L641</a>: 		if <b>containsDistrustedSPKIHash</b>(chain) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1422" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1422">#L1422</a>: func <b>containsDistrustedSPKIHash</b>(chain []*Certificate) bool {
+</code></pre><pre id="footer">
+<table><tr><td><img src="../../png/zigo101-twitter.png"></td>
+<td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
+<b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
+PR and bug reports are welcome and can be submitted to <a href="https://github.com/go101/golds">the issue list</a>.
+Please follow <a href="https://twitter.com/zigo_101">@zigo_101</a> (reachable from the left QR code) to get the latest news of <b>Golds</b>.</td></tr></table></pre>
\ No newline at end of file
diff --git a/use/crypto/x509..distrustedSPKIHashes^39e5c.html b/use/crypto/x509..distrustedSPKIHashes^39e5c.html
new file mode 100644
index 00000000000..1595bd340b7
--- /dev/null
+++ b/use/crypto/x509..distrustedSPKIHashes^39e5c.html
@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>References: crypto/x509.distrustedSPKIHashes</title>
+<link href="../../css/auto-v0.8.5.css" rel="stylesheet">
+<script src="../../jvs/golds-v0.8.5.js"></script>
+<body onload="onPageLoad()"><div>
+
+<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1409">distrustedSPKIHashes</a></b></span>
+
+<span class="title">2 uses</span>
+
+	crypto/x509 (current package)
+		<a href="../../src/crypto/x509/verify.go.html#line-1409">verify.go#L1409</a>: var <b>distrustedSPKIHashes</b> = map[string]struct{}{
+		<a href="../../src/crypto/x509/verify.go.html#line-1425" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1425">#L1425</a>: 		if _, ok := <b>distrustedSPKIHashes</b>[hex.EncodeToString(h[:])]; ok {
+</code></pre><pre id="footer">
+<table><tr><td><img src="../../png/zigo101-twitter.png"></td>
+<td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
+<b>Golds</b> is a <a href="https://go101.org">Go 101</a> project developed by <a href="https://tapirgames.com">Tapir Liu</a>.
+PR and bug reports are welcome and can be submitted to <a href="https://github.com/go101/golds">the issue list</a>.
+Please follow <a href="https://twitter.com/zigo_101">@zigo_101</a> (reachable from the left QR code) to get the latest news of <b>Golds</b>.</td></tr></table></pre>
\ No newline at end of file
diff --git a/use/crypto/x509..domainToReverseLabels^c4083.html b/use/crypto/x509..domainToReverseLabels^c4083.html
index 69ea4a97618..00041e2c4c8 100644
--- a/use/crypto/x509..domainToReverseLabels^c4083.html
+++ b/use/crypto/x509..domainToReverseLabels^c4083.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-402">domainToReverseLabels</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-404">domainToReverseLabels</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-391">verify.go#L391</a>: 	if _, ok := <b>domainToReverseLabels</b>(in); !ok {
-		<a href="../../src/crypto/x509/verify.go.html#line-402" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-402">#L402</a>: func <b>domainToReverseLabels</b>(domain string) (reverseLabels []string, ok bool) {
+		<a href="../../src/crypto/x509/verify.go.html#line-393">verify.go#L393</a>: 	if _, ok := <b>domainToReverseLabels</b>(in); !ok {
+		<a href="../../src/crypto/x509/verify.go.html#line-404" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-404">#L404</a>: func <b>domainToReverseLabels</b>(domain string) (reverseLabels []string, ok bool) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..errNotParsed^5d726.html b/use/crypto/x509..errNotParsed^5d726.html
index 74068ee6919..a22e563b1df 100644
--- a/use/crypto/x509..errNotParsed^5d726.html
+++ b/use/crypto/x509..errNotParsed^5d726.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-189">errNotParsed</a></b></span>
+<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-191">errNotParsed</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-189">verify.go#L189</a>: var <b>errNotParsed</b> = errors.New("x509: missing ASN.1 contents; use ParseCertificate")
-		<a href="../../src/crypto/x509/verify.go.html#line-546" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-546">#L546</a>: 		return nil, <b>errNotParsed</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-554" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-554">#L554</a>: 			return nil, <b>errNotParsed</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-191">verify.go#L191</a>: var <b>errNotParsed</b> = errors.New("x509: missing ASN.1 contents; use ParseCertificate")
+		<a href="../../src/crypto/x509/verify.go.html#line-548" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-548">#L548</a>: 		return nil, <b>errNotParsed</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-556" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-556">#L556</a>: 			return nil, <b>errNotParsed</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..errSignatureLimit^ae435.html b/use/crypto/x509..errSignatureLimit^ae435.html
index b7e1b80be27..85f4dfded94 100644
--- a/use/crypto/x509..errSignatureLimit^ae435.html
+++ b/use/crypto/x509..errSignatureLimit^ae435.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-723">errSignatureLimit</a></b></span>
+<pre><code><span style="font-size:x-large;">var <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-728">errSignatureLimit</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-723">verify.go#L723</a>: var <b>errSignatureLimit</b> = errors.New("x509: signature check attempts limit reached while verifying certificate chain")
-		<a href="../../src/crypto/x509/verify.go.html#line-737" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-737">#L737</a>: 			err = <b>errSignatureLimit</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-792" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-792">#L792</a>: 			if err == <b>errSignatureLimit</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-728">verify.go#L728</a>: var <b>errSignatureLimit</b> = errors.New("x509: signature check attempts limit reached while verifying certificate chain")
+		<a href="../../src/crypto/x509/verify.go.html#line-742" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-742">#L742</a>: 			err = <b>errSignatureLimit</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-797" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-797">#L797</a>: 			if err == <b>errSignatureLimit</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..intermediateCertificate^859b0.html b/use/crypto/x509..intermediateCertificate^859b0.html
index d2a4c79da92..4e3abf0a06d 100644
--- a/use/crypto/x509..intermediateCertificate^859b0.html
+++ b/use/crypto/x509..intermediateCertificate^859b0.html
@@ -9,16 +9,16 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-245">intermediateCertificate</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-247">intermediateCertificate</a></b></span>
 
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-245">verify.go#L245</a>: 	<b>intermediateCertificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-473" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-473">#L473</a>: 	if certType == <b>intermediateCertificate</b> || certType == rootCertificate {
-		<a href="../../src/crypto/x509/verify.go.html#line-496" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-496">#L496</a>: 	if certType == <b>intermediateCertificate</b> &amp;&amp; (!c.BasicConstraintsValid || !c.IsCA) {
-		<a href="../../src/crypto/x509/verify.go.html#line-775" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-775">#L775</a>: 		case <b>intermediateCertificate</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-788" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-788">#L788</a>: 		{<b>intermediateCertificate</b>, opts.Intermediates.findPotentialParents(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-247">verify.go#L247</a>: 	<b>intermediateCertificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-475" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-475">#L475</a>: 	if certType == <b>intermediateCertificate</b> || certType == rootCertificate {
+		<a href="../../src/crypto/x509/verify.go.html#line-498" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-498">#L498</a>: 	if certType == <b>intermediateCertificate</b> &amp;&amp; (!c.BasicConstraintsValid || !c.IsCA) {
+		<a href="../../src/crypto/x509/verify.go.html#line-780" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-780">#L780</a>: 		case <b>intermediateCertificate</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-793" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-793">#L793</a>: 		{<b>intermediateCertificate</b>, opts.Intermediates.findPotentialParents(c)},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..leafCertificate^dccda.html b/use/crypto/x509..leafCertificate^dccda.html
index d493c9189b0..7bbf7b7b30f 100644
--- a/use/crypto/x509..leafCertificate^dccda.html
+++ b/use/crypto/x509..leafCertificate^dccda.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-244">leafCertificate</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-246">leafCertificate</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-244">verify.go#L244</a>: 	<b>leafCertificate</b> = iota
-		<a href="../../src/crypto/x509/verify.go.html#line-584" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-584">#L584</a>: 	err := c.isValid(<b>leafCertificate</b>, nil, &amp;opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-246">verify.go#L246</a>: 	<b>leafCertificate</b> = iota
+		<a href="../../src/crypto/x509/verify.go.html#line-586" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-586">#L586</a>: 	err := c.isValid(<b>leafCertificate</b>, nil, &amp;opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..matchExactly^dd43f.html b/use/crypto/x509..matchExactly^dd43f.html
index 55a8757d460..5438b0c87b2 100644
--- a/use/crypto/x509..matchExactly^dd43f.html
+++ b/use/crypto/x509..matchExactly^dd43f.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-863">matchExactly</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-868">matchExactly</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-863">verify.go#L863</a>: func <b>matchExactly</b>(hostA, hostB string) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-968" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-968">#L968</a>: 			if <b>matchExactly</b>(match, candidateName) {
+		<a href="../../src/crypto/x509/verify.go.html#line-868">verify.go#L868</a>: func <b>matchExactly</b>(hostA, hostB string) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-973" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-973">#L973</a>: 			if <b>matchExactly</b>(match, candidateName) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..matchHostnames^1fee7.html b/use/crypto/x509..matchHostnames^1fee7.html
index 7ed6535042e..a1a7ca2197c 100644
--- a/use/crypto/x509..matchHostnames^1fee7.html
+++ b/use/crypto/x509..matchHostnames^1fee7.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-870">matchHostnames</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-875">matchHostnames</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-113">verify.go#L113</a>: 	if !c.hasSANExtension() &amp;&amp; <b>matchHostnames</b>(c.Subject.CommonName, splitHostname(h.Host)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-870" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-870">#L870</a>: func <b>matchHostnames</b>(pattern string, hostParts []string) bool {
-		<a href="../../src/crypto/x509/verify.go.html#line-964" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-964">#L964</a>: 			if <b>matchHostnames</b>(match, hostParts) {
+		<a href="../../src/crypto/x509/verify.go.html#line-115">verify.go#L115</a>: 	if !c.hasSANExtension() &amp;&amp; <b>matchHostnames</b>(c.Subject.CommonName, splitHostname(h.Host)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-875" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-875">#L875</a>: func <b>matchHostnames</b>(pattern string, hostParts []string) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-969" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-969">#L969</a>: 			if <b>matchHostnames</b>(match, hostParts) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..maxChainSignatureChecks^d9aa7.html b/use/crypto/x509..maxChainSignatureChecks^d9aa7.html
index 24b51f9a34b..1a6c7c545a5 100644
--- a/use/crypto/x509..maxChainSignatureChecks^d9aa7.html
+++ b/use/crypto/x509..maxChainSignatureChecks^d9aa7.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-721">maxChainSignatureChecks</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-726">maxChainSignatureChecks</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-721">verify.go#L721</a>: const <b>maxChainSignatureChecks</b> = 100
-		<a href="../../src/crypto/x509/verify.go.html#line-736" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-736">#L736</a>: 		if *sigChecks &gt; <b>maxChainSignatureChecks</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-726">verify.go#L726</a>: const <b>maxChainSignatureChecks</b> = 100
+		<a href="../../src/crypto/x509/verify.go.html#line-741" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-741">#L741</a>: 		if *sigChecks &gt; <b>maxChainSignatureChecks</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..mustNewOIDFromInts^88765.html b/use/crypto/x509..mustNewOIDFromInts^88765.html
index d897b17f461..2bfd7f135fd 100644
--- a/use/crypto/x509..mustNewOIDFromInts^88765.html
+++ b/use/crypto/x509..mustNewOIDFromInts^88765.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1035">mustNewOIDFromInts</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1040">mustNewOIDFromInts</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1035">verify.go#L1035</a>: func <b>mustNewOIDFromInts</b>(ints []uint64) OID {
-		<a href="../../src/crypto/x509/verify.go.html#line-1073" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1073">#L1073</a>: var anyPolicyOID = <b>mustNewOIDFromInts</b>([]uint64{2, 5, 29, 32, 0})
+		<a href="../../src/crypto/x509/verify.go.html#line-1040">verify.go#L1040</a>: func <b>mustNewOIDFromInts</b>(ints []uint64) OID {
+		<a href="../../src/crypto/x509/verify.go.html#line-1078" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1078">#L1078</a>: var anyPolicyOID = <b>mustNewOIDFromInts</b>([]uint64{2, 5, 29, 32, 0})
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..newPolicyGraphNode^07eb8.html b/use/crypto/x509..newPolicyGraphNode^07eb8.html
index f868600ab25..af07a27d20c 100644
--- a/use/crypto/x509..newPolicyGraphNode^07eb8.html
+++ b/use/crypto/x509..newPolicyGraphNode^07eb8.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1052">newPolicyGraphNode</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1057">newPolicyGraphNode</a></b></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1052">verify.go#L1052</a>: func <b>newPolicyGraphNode</b>(valid OID, parents []*policyGraphNode) *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1257" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1257">#L1257</a>: 					pg.insert(<b>newPolicyGraphNode</b>(policy, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1278" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1278">#L1278</a>: 					pg.insert(<b>newPolicyGraphNode</b>(OID{der: []byte(oidStr)}, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1313" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1313">#L1313</a>: 							n := <b>newPolicyGraphNode</b>(OID{der: []byte(issuerStr)}, []*policyGraphNode{matching})
+		<a href="../../src/crypto/x509/verify.go.html#line-1057">verify.go#L1057</a>: func <b>newPolicyGraphNode</b>(valid OID, parents []*policyGraphNode) *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1262" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1262">#L1262</a>: 					pg.insert(<b>newPolicyGraphNode</b>(policy, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1283" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1283">#L1283</a>: 					pg.insert(<b>newPolicyGraphNode</b>(OID{der: []byte(oidStr)}, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1318" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1318">#L1318</a>: 							n := <b>newPolicyGraphNode</b>(OID{der: []byte(issuerStr)}, []*policyGraphNode{matching})
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..newPolicyGraph^76d81.html b/use/crypto/x509..newPolicyGraph^76d81.html
index b919cf0e1ac..f4d9a714aea 100644
--- a/use/crypto/x509..newPolicyGraph^76d81.html
+++ b/use/crypto/x509..newPolicyGraph^76d81.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1075">newPolicyGraph</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1080">newPolicyGraph</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1075">verify.go#L1075</a>: func <b>newPolicyGraph</b>() *policyGraph {
-		<a href="../../src/crypto/x509/verify.go.html#line-1198" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1198">#L1198</a>: 	pg := <b>newPolicyGraph</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1080">verify.go#L1080</a>: func <b>newPolicyGraph</b>() *policyGraph {
+		<a href="../../src/crypto/x509/verify.go.html#line-1203" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1203">#L1203</a>: 	pg := <b>newPolicyGraph</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..oidExtensionSubjectAltName^82325.html b/use/crypto/x509..oidExtensionSubjectAltName^82325.html
index 3746c9883ca..f090636df45 100644
--- a/use/crypto/x509..oidExtensionSubjectAltName^82325.html
+++ b/use/crypto/x509..oidExtensionSubjectAltName^82325.html
@@ -14,8 +14,8 @@
 <span class="title">10 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-682">verify.go#L682</a>: 		if ext.Id.Equal(<b>oidExtensionSubjectAltName</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-700" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-700">#L700</a>: 			if ext.Id.Equal(<b>oidExtensionSubjectAltName</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-687">verify.go#L687</a>: 		if ext.Id.Equal(<b>oidExtensionSubjectAltName</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-705" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-705">#L705</a>: 			if ext.Id.Equal(<b>oidExtensionSubjectAltName</b>) {
 		<a href="../../src/crypto/x509/x509.go.html#line-921">x509.go#L921</a>: 	return oidInExtensions(<b>oidExtensionSubjectAltName</b>, c.Extensions)
 		<a href="../../src/crypto/x509/x509.go.html#line-967" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-967">#L967</a>: 		if e.Id.Equal(<b>oidExtensionSubjectAltName</b>) {
 		<a href="../../src/crypto/x509/x509.go.html#line-1127" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-1127">#L1127</a>: 	<b>oidExtensionSubjectAltName</b>        = []int{2, 5, 29, 17}
diff --git a/use/crypto/x509..parseRFC2821Mailbox^e4401.html b/use/crypto/x509..parseRFC2821Mailbox^e4401.html
index d565fd1f0fb..afc3075adfb 100644
--- a/use/crypto/x509..parseRFC2821Mailbox^e4401.html
+++ b/use/crypto/x509..parseRFC2821Mailbox^e4401.html
@@ -9,7 +9,7 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-264">parseRFC2821Mailbox</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-266">parseRFC2821Mailbox</a></b></span>
 
 <span class="title">4 uses</span>
 
@@ -17,7 +17,7 @@
 		<a href="../../src/crypto/x509/constraints.go.html#line-414">constraints.go#L414</a>: 		parsed, ok := <b>parseRFC2821Mailbox</b>(c)
 		<a href="../../src/crypto/x509/constraints.go.html#line-607" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-607">#L607</a>: 		mailbox, ok := <b>parseRFC2821Mailbox</b>(email)
 		<a href="../../src/crypto/x509/parser.go.html#line-628">parser.go#L628</a>: 					if _, ok := <b>parseRFC2821Mailbox</b>(constraint); !ok {
-		<a href="../../src/crypto/x509/verify.go.html#line-264">verify.go#L264</a>: func <b>parseRFC2821Mailbox</b>(in string) (mailbox rfc2821Mailbox, ok bool) {
+		<a href="../../src/crypto/x509/verify.go.html#line-266">verify.go#L266</a>: func <b>parseRFC2821Mailbox</b>(in string) (mailbox rfc2821Mailbox, ok bool) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policiesValid^aeb80.html b/use/crypto/x509..policiesValid^aeb80.html
index 9871506a204..91f22ea66b8 100644
--- a/use/crypto/x509..policiesValid^aeb80.html
+++ b/use/crypto/x509..policiesValid^aeb80.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1180">policiesValid</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1185">policiesValid</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-623">verify.go#L623</a>: 		if !<b>policiesValid</b>(chain, opts) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1180" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1180">#L1180</a>: func <b>policiesValid</b>(chain []*Certificate, opts VerifyOptions) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-625">verify.go#L625</a>: 		if !<b>policiesValid</b>(chain, opts) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1185" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1185">#L1185</a>: func <b>policiesValid</b>(chain []*Certificate, opts VerifyOptions) bool {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraphNode^5c8b0.children^10910.html b/use/crypto/x509..policyGraphNode^5c8b0.children^10910.html
index 811da99a8a8..0043449e366 100644
--- a/use/crypto/x509..policyGraphNode^5c8b0.children^10910.html
+++ b/use/crypto/x509..policyGraphNode^5c8b0.children^10910.html
@@ -9,19 +9,19 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1049">children</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1054">children</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">8 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1049">verify.go#L1049</a>: 	<b>children</b> map[*policyGraphNode]bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1056" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1056">#L1056</a>: 		<b>children</b>:          map[*policyGraphNode]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1060" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1060">#L1060</a>: 		p.<b>children</b>[n] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1079" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1079">#L1079</a>: 		<b>children</b>:          map[*policyGraphNode]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1127" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1127">#L1127</a>: 		delete(p.<b>children</b>, n)
-		<a href="../../src/crypto/x509/verify.go.html#line-1129" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1129">#L1129</a>: 	for c := range n.<b>children</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1158" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1158">#L1158</a>: 			if len(n.<b>children</b>) == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1160" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1160">#L1160</a>: 					delete(p.<b>children</b>, n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1054">verify.go#L1054</a>: 	<b>children</b> map[*policyGraphNode]bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1061" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1061">#L1061</a>: 		<b>children</b>:          map[*policyGraphNode]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1065" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1065">#L1065</a>: 		p.<b>children</b>[n] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1084" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1084">#L1084</a>: 		<b>children</b>:          map[*policyGraphNode]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1132" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1132">#L1132</a>: 		delete(p.<b>children</b>, n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1134" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1134">#L1134</a>: 	for c := range n.<b>children</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1163" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1163">#L1163</a>: 			if len(n.<b>children</b>) == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1165" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1165">#L1165</a>: 					delete(p.<b>children</b>, n)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html b/use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html
index 1dd6fd2bd36..9c1b600b3ec 100644
--- a/use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html
+++ b/use/crypto/x509..policyGraphNode^5c8b0.expectedPolicySet^295e3.html
@@ -9,18 +9,18 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1045">expectedPolicySet</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1050">expectedPolicySet</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">7 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1045">verify.go#L1045</a>: 	<b>expectedPolicySet</b> []OID
-		<a href="../../src/crypto/x509/verify.go.html#line-1055" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1055">#L1055</a>: 		<b>expectedPolicySet</b>: []OID{valid},
-		<a href="../../src/crypto/x509/verify.go.html#line-1078" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1078">#L1078</a>: 		<b>expectedPolicySet</b>: []OID{anyPolicyOID},
-		<a href="../../src/crypto/x509/verify.go.html#line-1171" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1171">#L1171</a>: 		for _, e := range n.<b>expectedPolicySet</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1270" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1270">#L1270</a>: 					for _, expected := range p.<b>expectedPolicySet</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1310" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1310">#L1310</a>: 							matching.<b>expectedPolicySet</b> = subjectPolicies
-		<a href="../../src/crypto/x509/verify.go.html#line-1314" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1314">#L1314</a>: 							n.<b>expectedPolicySet</b> = subjectPolicies
+		<a href="../../src/crypto/x509/verify.go.html#line-1050">verify.go#L1050</a>: 	<b>expectedPolicySet</b> []OID
+		<a href="../../src/crypto/x509/verify.go.html#line-1060" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1060">#L1060</a>: 		<b>expectedPolicySet</b>: []OID{valid},
+		<a href="../../src/crypto/x509/verify.go.html#line-1083" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1083">#L1083</a>: 		<b>expectedPolicySet</b>: []OID{anyPolicyOID},
+		<a href="../../src/crypto/x509/verify.go.html#line-1176" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1176">#L1176</a>: 		for _, e := range n.<b>expectedPolicySet</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1275" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1275">#L1275</a>: 					for _, expected := range p.<b>expectedPolicySet</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1315" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1315">#L1315</a>: 							matching.<b>expectedPolicySet</b> = subjectPolicies
+		<a href="../../src/crypto/x509/verify.go.html#line-1319" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1319">#L1319</a>: 							n.<b>expectedPolicySet</b> = subjectPolicies
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraphNode^5c8b0.html b/use/crypto/x509..policyGraphNode^5c8b0.html
index ea50a32126a..32117f131f9 100644
--- a/use/crypto/x509..policyGraphNode^5c8b0.html
+++ b/use/crypto/x509..policyGraphNode^5c8b0.html
@@ -9,38 +9,38 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a></b></span>
 
 <span class="title">28 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1043">verify.go#L1043</a>: type <b>policyGraphNode</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-1048" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1048">#L1048</a>: 	parents  map[*<b>policyGraphNode</b>]bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1049" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1049">#L1049</a>: 	children map[*<b>policyGraphNode</b>]bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1052" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1052">#L1052</a>: func newPolicyGraphNode(valid OID, parents []*<b>policyGraphNode</b>) *<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1053" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1053">#L1053</a>: 	n := &amp;<b>policyGraphNode</b>{
-		<a href="../../src/crypto/x509/verify.go.html#line-1056" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1056">#L1056</a>: 		children:          map[*<b>policyGraphNode</b>]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1057" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1057">#L1057</a>: 		parents:           map[*<b>policyGraphNode</b>]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1067" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1067">#L1067</a>: 	strata []map[string]*<b>policyGraphNode</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1069" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1069">#L1069</a>: 	parentIndex map[string][]*<b>policyGraphNode</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1076" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1076">#L1076</a>: 	root := <b>policyGraphNode</b>{
-		<a href="../../src/crypto/x509/verify.go.html#line-1079" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1079">#L1079</a>: 		children:          map[*<b>policyGraphNode</b>]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1080" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1080">#L1080</a>: 		parents:           map[*<b>policyGraphNode</b>]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1084" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1084">#L1084</a>: 		strata: []map[string]*<b>policyGraphNode</b>{{string(anyPolicyOID.der): &amp;root}},
-		<a href="../../src/crypto/x509/verify.go.html#line-1088" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1088">#L1088</a>: func (pg *policyGraph) insert(n *<b>policyGraphNode</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1092" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1092">#L1092</a>: func (pg *policyGraph) parentsWithExpected(expected OID) []*<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1099" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1099">#L1099</a>: func (pg *policyGraph) parentWithAnyPolicy() *<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1106" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1106">#L1106</a>: func (pg *policyGraph) parents() iter.Seq[*<b>policyGraphNode</b>] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1113" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1113">#L1113</a>: func (pg *policyGraph) leaves() map[string]*<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1117" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1117">#L1117</a>: func (pg *policyGraph) leafWithPolicy(policy OID) *<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1135" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1135">#L1135</a>: func (pg *policyGraph) validPolicyNodes() []*<b>policyGraphNode</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1136" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1136">#L1136</a>: 	var validNodes []*<b>policyGraphNode</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-1169" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1169">#L1169</a>: 	pg.parentIndex = map[string][]*<b>policyGraphNode</b>{}
-		<a href="../../src/crypto/x509/verify.go.html#line-1177" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1177">#L1177</a>: 	pg.strata = append(pg.strata, map[string]*<b>policyGraphNode</b>{})
-		<a href="../../src/crypto/x509/verify.go.html#line-1253" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1253">#L1253</a>: 						parents = []*<b>policyGraphNode</b>{anyParent}
-		<a href="../../src/crypto/x509/verify.go.html#line-1267" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1267">#L1267</a>: 				missing := map[string][]*<b>policyGraphNode</b>{}
-		<a href="../../src/crypto/x509/verify.go.html#line-1313" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1313">#L1313</a>: 							n := newPolicyGraphNode(OID{der: []byte(issuerStr)}, []*<b>policyGraphNode</b>{matching})
-		<a href="../../src/crypto/x509/verify.go.html#line-1361" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1361">#L1361</a>: 	var validPolicyNodeSet []*<b>policyGraphNode</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1048">verify.go#L1048</a>: type <b>policyGraphNode</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-1053" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1053">#L1053</a>: 	parents  map[*<b>policyGraphNode</b>]bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1054" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1054">#L1054</a>: 	children map[*<b>policyGraphNode</b>]bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1057" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1057">#L1057</a>: func newPolicyGraphNode(valid OID, parents []*<b>policyGraphNode</b>) *<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1058" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1058">#L1058</a>: 	n := &amp;<b>policyGraphNode</b>{
+		<a href="../../src/crypto/x509/verify.go.html#line-1061" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1061">#L1061</a>: 		children:          map[*<b>policyGraphNode</b>]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1062" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1062">#L1062</a>: 		parents:           map[*<b>policyGraphNode</b>]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1072" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1072">#L1072</a>: 	strata []map[string]*<b>policyGraphNode</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1074" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1074">#L1074</a>: 	parentIndex map[string][]*<b>policyGraphNode</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1081" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1081">#L1081</a>: 	root := <b>policyGraphNode</b>{
+		<a href="../../src/crypto/x509/verify.go.html#line-1084" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1084">#L1084</a>: 		children:          map[*<b>policyGraphNode</b>]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1085" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1085">#L1085</a>: 		parents:           map[*<b>policyGraphNode</b>]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 		strata: []map[string]*<b>policyGraphNode</b>{{string(anyPolicyOID.der): &amp;root}},
+		<a href="../../src/crypto/x509/verify.go.html#line-1093" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1093">#L1093</a>: func (pg *policyGraph) insert(n *<b>policyGraphNode</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1097" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1097">#L1097</a>: func (pg *policyGraph) parentsWithExpected(expected OID) []*<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1104" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1104">#L1104</a>: func (pg *policyGraph) parentWithAnyPolicy() *<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1111" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1111">#L1111</a>: func (pg *policyGraph) parents() iter.Seq[*<b>policyGraphNode</b>] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1118">#L1118</a>: func (pg *policyGraph) leaves() map[string]*<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: func (pg *policyGraph) leafWithPolicy(policy OID) *<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1140" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1140">#L1140</a>: func (pg *policyGraph) validPolicyNodes() []*<b>policyGraphNode</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1141" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1141">#L1141</a>: 	var validNodes []*<b>policyGraphNode</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-1174" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1174">#L1174</a>: 	pg.parentIndex = map[string][]*<b>policyGraphNode</b>{}
+		<a href="../../src/crypto/x509/verify.go.html#line-1182" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1182">#L1182</a>: 	pg.strata = append(pg.strata, map[string]*<b>policyGraphNode</b>{})
+		<a href="../../src/crypto/x509/verify.go.html#line-1258" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1258">#L1258</a>: 						parents = []*<b>policyGraphNode</b>{anyParent}
+		<a href="../../src/crypto/x509/verify.go.html#line-1272" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1272">#L1272</a>: 				missing := map[string][]*<b>policyGraphNode</b>{}
+		<a href="../../src/crypto/x509/verify.go.html#line-1318" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1318">#L1318</a>: 							n := newPolicyGraphNode(OID{der: []byte(issuerStr)}, []*<b>policyGraphNode</b>{matching})
+		<a href="../../src/crypto/x509/verify.go.html#line-1366" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1366">#L1366</a>: 	var validPolicyNodeSet []*<b>policyGraphNode</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html b/use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html
index 73d9db6ab19..da2cebe15f5 100644
--- a/use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html
+++ b/use/crypto/x509..policyGraphNode^5c8b0.parents^6ce83.html
@@ -9,20 +9,20 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">parents</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1053">parents</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">9 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1048">verify.go#L1048</a>: 	<b>parents</b>  map[*policyGraphNode]bool
-		<a href="../../src/crypto/x509/verify.go.html#line-1057" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1057">#L1057</a>: 		<b>parents</b>:           map[*policyGraphNode]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1061" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1061">#L1061</a>: 		n.<b>parents</b>[p] = true
-		<a href="../../src/crypto/x509/verify.go.html#line-1080" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1080">#L1080</a>: 		<b>parents</b>:           map[*policyGraphNode]bool{},
-		<a href="../../src/crypto/x509/verify.go.html#line-1126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1126">#L1126</a>: 	for p := range n.<b>parents</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1130" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1130">#L1130</a>: 		delete(c.<b>parents</b>, n)
-		<a href="../../src/crypto/x509/verify.go.html#line-1143" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1143">#L1143</a>: 			if len(n.<b>parents</b>) == 1 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1144" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1144">#L1144</a>: 				for p := range n.<b>parents</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1159" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1159">#L1159</a>: 				for p := range n.<b>parents</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1053">verify.go#L1053</a>: 	<b>parents</b>  map[*policyGraphNode]bool
+		<a href="../../src/crypto/x509/verify.go.html#line-1062" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1062">#L1062</a>: 		<b>parents</b>:           map[*policyGraphNode]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1066" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1066">#L1066</a>: 		n.<b>parents</b>[p] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1085" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1085">#L1085</a>: 		<b>parents</b>:           map[*policyGraphNode]bool{},
+		<a href="../../src/crypto/x509/verify.go.html#line-1131" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1131">#L1131</a>: 	for p := range n.<b>parents</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1135" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1135">#L1135</a>: 		delete(c.<b>parents</b>, n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1148" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1148">#L1148</a>: 			if len(n.<b>parents</b>) == 1 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1149" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1149">#L1149</a>: 				for p := range n.<b>parents</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1164" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1164">#L1164</a>: 				for p := range n.<b>parents</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html b/use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html
index 862dc9c185e..6c2089fcad1 100644
--- a/use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html
+++ b/use/crypto/x509..policyGraphNode^5c8b0.validPolicy^d78cb.html
@@ -9,19 +9,19 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1043">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1044">validPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1048">policyGraphNode</a>.<a href="../../src/crypto/x509/verify.go.html#line-1049">validPolicy</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">8 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1044">verify.go#L1044</a>: 	<b>validPolicy</b>       OID
-		<a href="../../src/crypto/x509/verify.go.html#line-1054" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1054">#L1054</a>: 		<b>validPolicy</b>:       valid,
-		<a href="../../src/crypto/x509/verify.go.html#line-1077" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1077">#L1077</a>: 		<b>validPolicy</b>:       anyPolicyOID,
-		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 	pg.strata[pg.depth][string(n.<b>validPolicy</b>.der)] = n
-		<a href="../../src/crypto/x509/verify.go.html#line-1139" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1139">#L1139</a>: 			if n.<b>validPolicy</b>.Equal(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1145" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1145">#L1145</a>: 					if p.<b>validPolicy</b>.Equal(anyPolicyOID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1162">#L1162</a>: 				delete(pg.strata[i], string(n.<b>validPolicy</b>.der))
-		<a href="../../src/crypto/x509/verify.go.html#line-1374" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1374">#L1374</a>: 		authorityConstrainedPolicySet[string(n.<b>validPolicy</b>.der)] = true
+		<a href="../../src/crypto/x509/verify.go.html#line-1049">verify.go#L1049</a>: 	<b>validPolicy</b>       OID
+		<a href="../../src/crypto/x509/verify.go.html#line-1059" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1059">#L1059</a>: 		<b>validPolicy</b>:       valid,
+		<a href="../../src/crypto/x509/verify.go.html#line-1082" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1082">#L1082</a>: 		<b>validPolicy</b>:       anyPolicyOID,
+		<a href="../../src/crypto/x509/verify.go.html#line-1094" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1094">#L1094</a>: 	pg.strata[pg.depth][string(n.<b>validPolicy</b>.der)] = n
+		<a href="../../src/crypto/x509/verify.go.html#line-1144" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1144">#L1144</a>: 			if n.<b>validPolicy</b>.Equal(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1150" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1150">#L1150</a>: 					if p.<b>validPolicy</b>.Equal(anyPolicyOID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1167" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1167">#L1167</a>: 				delete(pg.strata[i], string(n.<b>validPolicy</b>.der))
+		<a href="../../src/crypto/x509/verify.go.html#line-1379" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1379">#L1379</a>: 		authorityConstrainedPolicySet[string(n.<b>validPolicy</b>.der)] = true
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html b/use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html
index ef097502cb3..2bbf8304588 100644
--- a/use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html
+++ b/use/crypto/x509..policyGraph^f0ba7.deleteLeaf^91490.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1121">deleteLeaf</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1126">deleteLeaf</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1121">verify.go#L1121</a>: func (pg *policyGraph) <b>deleteLeaf</b>(policy OID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1300" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1300">#L1300</a>: 							pg.<b>deleteLeaf</b>(mapping.IssuerDomainPolicy)
+		<a href="../../src/crypto/x509/verify.go.html#line-1126">verify.go#L1126</a>: func (pg *policyGraph) <b>deleteLeaf</b>(policy OID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1305" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1305">#L1305</a>: 							pg.<b>deleteLeaf</b>(mapping.IssuerDomainPolicy)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.depth^ded32.html b/use/crypto/x509..policyGraph^f0ba7.depth^ded32.html
index 354b555cd1c..28d2c509300 100644
--- a/use/crypto/x509..policyGraph^f0ba7.depth^ded32.html
+++ b/use/crypto/x509..policyGraph^f0ba7.depth^ded32.html
@@ -9,27 +9,27 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1070">depth</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1075">depth</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">16 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1070">verify.go#L1070</a>: 	<b>depth</b>       int
-		<a href="../../src/crypto/x509/verify.go.html#line-1083" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1083">#L1083</a>: 		<b>depth</b>:  0,
-		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 	pg.strata[pg.<b>depth</b>][string(n.validPolicy.der)] = n
-		<a href="../../src/crypto/x509/verify.go.html#line-1093" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1093">#L1093</a>: 	if pg.<b>depth</b> == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1100" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1100">#L1100</a>: 	if pg.<b>depth</b> == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1103" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1103">#L1103</a>: 	return pg.strata[pg.<b>depth</b>-1][string(anyPolicyOID.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1107" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1107">#L1107</a>: 	if pg.<b>depth</b> == 0 {
-		<a href="../../src/crypto/x509/verify.go.html#line-1110" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1110">#L1110</a>: 	return maps.Values(pg.strata[pg.<b>depth</b>-1])
-		<a href="../../src/crypto/x509/verify.go.html#line-1114" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1114">#L1114</a>: 	return pg.strata[pg.<b>depth</b>]
-		<a href="../../src/crypto/x509/verify.go.html#line-1118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1118">#L1118</a>: 	return pg.strata[pg.<b>depth</b>][string(policy.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: 	n := pg.strata[pg.<b>depth</b>][string(policy.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1132" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1132">#L1132</a>: 	delete(pg.strata[pg.<b>depth</b>], string(policy.der))
-		<a href="../../src/crypto/x509/verify.go.html#line-1137" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1137">#L1137</a>: 	for i := pg.<b>depth</b>; i &gt;= 0; i-- {
-		<a href="../../src/crypto/x509/verify.go.html#line-1156" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1156">#L1156</a>: 	for i := pg.<b>depth</b> - 1; i &gt; 0; i-- {
-		<a href="../../src/crypto/x509/verify.go.html#line-1170" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1170">#L1170</a>: 	for _, n := range pg.strata[pg.<b>depth</b>] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1176" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1176">#L1176</a>: 	pg.<b>depth</b>++
+		<a href="../../src/crypto/x509/verify.go.html#line-1075">verify.go#L1075</a>: 	<b>depth</b>       int
+		<a href="../../src/crypto/x509/verify.go.html#line-1088" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1088">#L1088</a>: 		<b>depth</b>:  0,
+		<a href="../../src/crypto/x509/verify.go.html#line-1094" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1094">#L1094</a>: 	pg.strata[pg.<b>depth</b>][string(n.validPolicy.der)] = n
+		<a href="../../src/crypto/x509/verify.go.html#line-1098" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1098">#L1098</a>: 	if pg.<b>depth</b> == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1105" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1105">#L1105</a>: 	if pg.<b>depth</b> == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1108" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1108">#L1108</a>: 	return pg.strata[pg.<b>depth</b>-1][string(anyPolicyOID.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1112" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1112">#L1112</a>: 	if pg.<b>depth</b> == 0 {
+		<a href="../../src/crypto/x509/verify.go.html#line-1115" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1115">#L1115</a>: 	return maps.Values(pg.strata[pg.<b>depth</b>-1])
+		<a href="../../src/crypto/x509/verify.go.html#line-1119" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1119">#L1119</a>: 	return pg.strata[pg.<b>depth</b>]
+		<a href="../../src/crypto/x509/verify.go.html#line-1123" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1123">#L1123</a>: 	return pg.strata[pg.<b>depth</b>][string(policy.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1127" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1127">#L1127</a>: 	n := pg.strata[pg.<b>depth</b>][string(policy.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1137" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1137">#L1137</a>: 	delete(pg.strata[pg.<b>depth</b>], string(policy.der))
+		<a href="../../src/crypto/x509/verify.go.html#line-1142" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1142">#L1142</a>: 	for i := pg.<b>depth</b>; i &gt;= 0; i-- {
+		<a href="../../src/crypto/x509/verify.go.html#line-1161" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1161">#L1161</a>: 	for i := pg.<b>depth</b> - 1; i &gt; 0; i-- {
+		<a href="../../src/crypto/x509/verify.go.html#line-1175" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1175">#L1175</a>: 	for _, n := range pg.strata[pg.<b>depth</b>] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1181" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1181">#L1181</a>: 	pg.<b>depth</b>++
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.html b/use/crypto/x509..policyGraph^f0ba7.html
index 2cd111abfad..4d0521f523e 100644
--- a/use/crypto/x509..policyGraph^f0ba7.html
+++ b/use/crypto/x509..policyGraph^f0ba7.html
@@ -9,24 +9,24 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a></b></span>
 
 <span class="title">13 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1066">verify.go#L1066</a>: type <b>policyGraph</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-1075" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1075">#L1075</a>: func newPolicyGraph() *<b>policyGraph</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-1082" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1082">#L1082</a>: 	return &amp;<b>policyGraph</b>{
-		<a href="../../src/crypto/x509/verify.go.html#line-1088" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1088">#L1088</a>: func (pg *<b>policyGraph</b>) insert(n *policyGraphNode) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1092" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1092">#L1092</a>: func (pg *<b>policyGraph</b>) parentsWithExpected(expected OID) []*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1099" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1099">#L1099</a>: func (pg *<b>policyGraph</b>) parentWithAnyPolicy() *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1106" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1106">#L1106</a>: func (pg *<b>policyGraph</b>) parents() iter.Seq[*policyGraphNode] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1113" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1113">#L1113</a>: func (pg *<b>policyGraph</b>) leaves() map[string]*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1117" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1117">#L1117</a>: func (pg *<b>policyGraph</b>) leafWithPolicy(policy OID) *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1121" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1121">#L1121</a>: func (pg *<b>policyGraph</b>) deleteLeaf(policy OID) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1135" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1135">#L1135</a>: func (pg *<b>policyGraph</b>) validPolicyNodes() []*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1155" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1155">#L1155</a>: func (pg *<b>policyGraph</b>) prune() {
-		<a href="../../src/crypto/x509/verify.go.html#line-1168" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1168">#L1168</a>: func (pg *<b>policyGraph</b>) incrDepth() {
+		<a href="../../src/crypto/x509/verify.go.html#line-1071">verify.go#L1071</a>: type <b>policyGraph</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-1080" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1080">#L1080</a>: func newPolicyGraph() *<b>policyGraph</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-1087" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1087">#L1087</a>: 	return &amp;<b>policyGraph</b>{
+		<a href="../../src/crypto/x509/verify.go.html#line-1093" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1093">#L1093</a>: func (pg *<b>policyGraph</b>) insert(n *policyGraphNode) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1097" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1097">#L1097</a>: func (pg *<b>policyGraph</b>) parentsWithExpected(expected OID) []*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1104" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1104">#L1104</a>: func (pg *<b>policyGraph</b>) parentWithAnyPolicy() *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1111" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1111">#L1111</a>: func (pg *<b>policyGraph</b>) parents() iter.Seq[*policyGraphNode] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1118">#L1118</a>: func (pg *<b>policyGraph</b>) leaves() map[string]*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: func (pg *<b>policyGraph</b>) leafWithPolicy(policy OID) *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1126" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1126">#L1126</a>: func (pg *<b>policyGraph</b>) deleteLeaf(policy OID) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1140" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1140">#L1140</a>: func (pg *<b>policyGraph</b>) validPolicyNodes() []*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1160" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1160">#L1160</a>: func (pg *<b>policyGraph</b>) prune() {
+		<a href="../../src/crypto/x509/verify.go.html#line-1173" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1173">#L1173</a>: func (pg *<b>policyGraph</b>) incrDepth() {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html b/use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html
index 4691e8fed44..20531241a0e 100644
--- a/use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html
+++ b/use/crypto/x509..policyGraph^f0ba7.incrDepth^156cd.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1168">incrDepth</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1173">incrDepth</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1168">verify.go#L1168</a>: func (pg *policyGraph) <b>incrDepth</b>() {
-		<a href="../../src/crypto/x509/verify.go.html#line-1236" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1236">#L1236</a>: 			pg.<b>incrDepth</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1173">verify.go#L1173</a>: func (pg *policyGraph) <b>incrDepth</b>() {
+		<a href="../../src/crypto/x509/verify.go.html#line-1241" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1241">#L1241</a>: 			pg.<b>incrDepth</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.insert^1e225.html b/use/crypto/x509..policyGraph^f0ba7.insert^1e225.html
index 103706d34c0..eb952d2532c 100644
--- a/use/crypto/x509..policyGraph^f0ba7.insert^1e225.html
+++ b/use/crypto/x509..policyGraph^f0ba7.insert^1e225.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1088">insert</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1093">insert</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1088">verify.go#L1088</a>: func (pg *policyGraph) <b>insert</b>(n *policyGraphNode) {
-		<a href="../../src/crypto/x509/verify.go.html#line-1257" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1257">#L1257</a>: 					pg.<b>insert</b>(newPolicyGraphNode(policy, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1278" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1278">#L1278</a>: 					pg.<b>insert</b>(newPolicyGraphNode(OID{der: []byte(oidStr)}, parents))
-		<a href="../../src/crypto/x509/verify.go.html#line-1315" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1315">#L1315</a>: 							pg.<b>insert</b>(n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1093">verify.go#L1093</a>: func (pg *policyGraph) <b>insert</b>(n *policyGraphNode) {
+		<a href="../../src/crypto/x509/verify.go.html#line-1262" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1262">#L1262</a>: 					pg.<b>insert</b>(newPolicyGraphNode(policy, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1283" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1283">#L1283</a>: 					pg.<b>insert</b>(newPolicyGraphNode(OID{der: []byte(oidStr)}, parents))
+		<a href="../../src/crypto/x509/verify.go.html#line-1320" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1320">#L1320</a>: 							pg.<b>insert</b>(n)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html b/use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html
index 07771454c8e..b064071948b 100644
--- a/use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html
+++ b/use/crypto/x509..policyGraph^f0ba7.leafWithPolicy^49982.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1117">leafWithPolicy</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1122">leafWithPolicy</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1117">verify.go#L1117</a>: func (pg *policyGraph) <b>leafWithPolicy</b>(policy OID) *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1309" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1309">#L1309</a>: 						if matching := pg.<b>leafWithPolicy</b>(OID{der: []byte(issuerStr)}); matching != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1311" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1311">#L1311</a>: 						} else if matching := pg.<b>leafWithPolicy</b>(anyPolicyOID); matching != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-1366" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1366">#L1366</a>: 		if currentAny := pg.<b>leafWithPolicy</b>(anyPolicyOID); currentAny != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1122">verify.go#L1122</a>: func (pg *policyGraph) <b>leafWithPolicy</b>(policy OID) *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1314" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1314">#L1314</a>: 						if matching := pg.<b>leafWithPolicy</b>(OID{der: []byte(issuerStr)}); matching != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1316" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1316">#L1316</a>: 						} else if matching := pg.<b>leafWithPolicy</b>(anyPolicyOID); matching != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1371" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1371">#L1371</a>: 		if currentAny := pg.<b>leafWithPolicy</b>(anyPolicyOID); currentAny != nil {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html b/use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html
index 3255edafd0b..97387d5eb97 100644
--- a/use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html
+++ b/use/crypto/x509..policyGraph^f0ba7.leaves^5ed0a.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1113">leaves</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1118">leaves</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1113">verify.go#L1113</a>: func (pg *policyGraph) <b>leaves</b>() map[string]*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1268" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1268">#L1268</a>: 				leaves := pg.<b>leaves</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1118">verify.go#L1118</a>: func (pg *policyGraph) <b>leaves</b>() map[string]*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1273" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1273">#L1273</a>: 				leaves := pg.<b>leaves</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html b/use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html
index adb35c2339a..f6e3ce7b224 100644
--- a/use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html
+++ b/use/crypto/x509..policyGraph^f0ba7.parentIndex^b7264.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1069">parentIndex</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1074">parentIndex</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">5 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1069">verify.go#L1069</a>: 	<b>parentIndex</b> map[string][]*policyGraphNode
-		<a href="../../src/crypto/x509/verify.go.html#line-1096" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1096">#L1096</a>: 	return pg.<b>parentIndex</b>[string(expected.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1169" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1169">#L1169</a>: 	pg.<b>parentIndex</b> = map[string][]*policyGraphNode{}
-		<a href="../../src/crypto/x509/verify.go.html#line-1172" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1172">#L1172</a>: 			pg.<b>parentIndex</b>[string(e.der)] = append(pg.<b>parentIndex</b>[string(e.der)], n)
+		<a href="../../src/crypto/x509/verify.go.html#line-1074">verify.go#L1074</a>: 	<b>parentIndex</b> map[string][]*policyGraphNode
+		<a href="../../src/crypto/x509/verify.go.html#line-1101" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1101">#L1101</a>: 	return pg.<b>parentIndex</b>[string(expected.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1174" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1174">#L1174</a>: 	pg.<b>parentIndex</b> = map[string][]*policyGraphNode{}
+		<a href="../../src/crypto/x509/verify.go.html#line-1177" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1177">#L1177</a>: 			pg.<b>parentIndex</b>[string(e.der)] = append(pg.<b>parentIndex</b>[string(e.der)], n)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html b/use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html
index 84b1e76a0c0..2758366b3a3 100644
--- a/use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html
+++ b/use/crypto/x509..policyGraph^f0ba7.parentWithAnyPolicy^deed2.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1099">parentWithAnyPolicy</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1104">parentWithAnyPolicy</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1099">verify.go#L1099</a>: func (pg *policyGraph) <b>parentWithAnyPolicy</b>() *policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1252" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1252">#L1252</a>: 					if anyParent := pg.<b>parentWithAnyPolicy</b>(); anyParent != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-1104">verify.go#L1104</a>: func (pg *policyGraph) <b>parentWithAnyPolicy</b>() *policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1257" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1257">#L1257</a>: 					if anyParent := pg.<b>parentWithAnyPolicy</b>(); anyParent != nil {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html b/use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html
index e7629ae4839..b20c8c26235 100644
--- a/use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html
+++ b/use/crypto/x509..policyGraph^f0ba7.parentsWithExpected^a1913.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1092">parentsWithExpected</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1097">parentsWithExpected</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1092">verify.go#L1092</a>: func (pg *policyGraph) <b>parentsWithExpected</b>(expected OID) []*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1249" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1249">#L1249</a>: 				parents := pg.<b>parentsWithExpected</b>(policy)
+		<a href="../../src/crypto/x509/verify.go.html#line-1097">verify.go#L1097</a>: func (pg *policyGraph) <b>parentsWithExpected</b>(expected OID) []*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1254" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1254">#L1254</a>: 				parents := pg.<b>parentsWithExpected</b>(policy)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html b/use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html
index 84dbed526e9..e9f1f211609 100644
--- a/use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html
+++ b/use/crypto/x509..policyGraph^f0ba7.parents^6ce83.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1106">parents</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1111">parents</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1106">verify.go#L1106</a>: func (pg *policyGraph) <b>parents</b>() iter.Seq[*policyGraphNode] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1269" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1269">#L1269</a>: 				for p := range pg.<b>parents</b>() {
+		<a href="../../src/crypto/x509/verify.go.html#line-1111">verify.go#L1111</a>: func (pg *policyGraph) <b>parents</b>() iter.Seq[*policyGraphNode] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1274" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1274">#L1274</a>: 				for p := range pg.<b>parents</b>() {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.prune^6c831.html b/use/crypto/x509..policyGraph^f0ba7.prune^6c831.html
index d695311a25c..6c6a2877f9f 100644
--- a/use/crypto/x509..policyGraph^f0ba7.prune^6c831.html
+++ b/use/crypto/x509..policyGraph^f0ba7.prune^6c831.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1155">prune</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1160">prune</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1155">verify.go#L1155</a>: func (pg *policyGraph) <b>prune</b>() {
-		<a href="../../src/crypto/x509/verify.go.html#line-1283" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1283">#L1283</a>: 			pg.<b>prune</b>()
-		<a href="../../src/crypto/x509/verify.go.html#line-1305" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1305">#L1305</a>: 					pg.<b>prune</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1160">verify.go#L1160</a>: func (pg *policyGraph) <b>prune</b>() {
+		<a href="../../src/crypto/x509/verify.go.html#line-1288" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1288">#L1288</a>: 			pg.<b>prune</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1310" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1310">#L1310</a>: 					pg.<b>prune</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html b/use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html
index 35441c6d1a8..0da20d4101e 100644
--- a/use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html
+++ b/use/crypto/x509..policyGraph^f0ba7.strata^82ba7.html
@@ -9,25 +9,25 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1067">strata</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1072">strata</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">15 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1067">verify.go#L1067</a>: 	<b>strata</b> []map[string]*policyGraphNode
-		<a href="../../src/crypto/x509/verify.go.html#line-1084" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1084">#L1084</a>: 		<b>strata</b>: []map[string]*policyGraphNode{{string(anyPolicyOID.der): &amp;root}},
-		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 	pg.<b>strata</b>[pg.depth][string(n.validPolicy.der)] = n
-		<a href="../../src/crypto/x509/verify.go.html#line-1103" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1103">#L1103</a>: 	return pg.<b>strata</b>[pg.depth-1][string(anyPolicyOID.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1110" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1110">#L1110</a>: 	return maps.Values(pg.<b>strata</b>[pg.depth-1])
-		<a href="../../src/crypto/x509/verify.go.html#line-1114" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1114">#L1114</a>: 	return pg.<b>strata</b>[pg.depth]
-		<a href="../../src/crypto/x509/verify.go.html#line-1118" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1118">#L1118</a>: 	return pg.<b>strata</b>[pg.depth][string(policy.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1122" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1122">#L1122</a>: 	n := pg.<b>strata</b>[pg.depth][string(policy.der)]
-		<a href="../../src/crypto/x509/verify.go.html#line-1132" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1132">#L1132</a>: 	delete(pg.<b>strata</b>[pg.depth], string(policy.der))
-		<a href="../../src/crypto/x509/verify.go.html#line-1138" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1138">#L1138</a>: 		for _, n := range pg.<b>strata</b>[i] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1157" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1157">#L1157</a>: 		for _, n := range pg.<b>strata</b>[i] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1162">#L1162</a>: 				delete(pg.<b>strata</b>[i], string(n.validPolicy.der))
-		<a href="../../src/crypto/x509/verify.go.html#line-1170" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1170">#L1170</a>: 	for _, n := range pg.<b>strata</b>[pg.depth] {
-		<a href="../../src/crypto/x509/verify.go.html#line-1177" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1177">#L1177</a>: 	pg.<b>strata</b> = append(pg.<b>strata</b>, map[string]*policyGraphNode{})
+		<a href="../../src/crypto/x509/verify.go.html#line-1072">verify.go#L1072</a>: 	<b>strata</b> []map[string]*policyGraphNode
+		<a href="../../src/crypto/x509/verify.go.html#line-1089" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1089">#L1089</a>: 		<b>strata</b>: []map[string]*policyGraphNode{{string(anyPolicyOID.der): &amp;root}},
+		<a href="../../src/crypto/x509/verify.go.html#line-1094" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1094">#L1094</a>: 	pg.<b>strata</b>[pg.depth][string(n.validPolicy.der)] = n
+		<a href="../../src/crypto/x509/verify.go.html#line-1108" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1108">#L1108</a>: 	return pg.<b>strata</b>[pg.depth-1][string(anyPolicyOID.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1115" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1115">#L1115</a>: 	return maps.Values(pg.<b>strata</b>[pg.depth-1])
+		<a href="../../src/crypto/x509/verify.go.html#line-1119" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1119">#L1119</a>: 	return pg.<b>strata</b>[pg.depth]
+		<a href="../../src/crypto/x509/verify.go.html#line-1123" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1123">#L1123</a>: 	return pg.<b>strata</b>[pg.depth][string(policy.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1127" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1127">#L1127</a>: 	n := pg.<b>strata</b>[pg.depth][string(policy.der)]
+		<a href="../../src/crypto/x509/verify.go.html#line-1137" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1137">#L1137</a>: 	delete(pg.<b>strata</b>[pg.depth], string(policy.der))
+		<a href="../../src/crypto/x509/verify.go.html#line-1143" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1143">#L1143</a>: 		for _, n := range pg.<b>strata</b>[i] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1162" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1162">#L1162</a>: 		for _, n := range pg.<b>strata</b>[i] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1167" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1167">#L1167</a>: 				delete(pg.<b>strata</b>[i], string(n.validPolicy.der))
+		<a href="../../src/crypto/x509/verify.go.html#line-1175" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1175">#L1175</a>: 	for _, n := range pg.<b>strata</b>[pg.depth] {
+		<a href="../../src/crypto/x509/verify.go.html#line-1182" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1182">#L1182</a>: 	pg.<b>strata</b> = append(pg.<b>strata</b>, map[string]*policyGraphNode{})
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html b/use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html
index 462c76dec28..d723e31f572 100644
--- a/use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html
+++ b/use/crypto/x509..policyGraph^f0ba7.validPolicyNodes^22d86.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1066">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1135">validPolicyNodes</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-1071">policyGraph</a>.<a href="../../src/crypto/x509/verify.go.html#line-1140">validPolicyNodes</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-1135">verify.go#L1135</a>: func (pg *policyGraph) <b>validPolicyNodes</b>() []*policyGraphNode {
-		<a href="../../src/crypto/x509/verify.go.html#line-1364" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1364">#L1364</a>: 		validPolicyNodeSet = pg.<b>validPolicyNodes</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-1140">verify.go#L1140</a>: func (pg *policyGraph) <b>validPolicyNodes</b>() []*policyGraphNode {
+		<a href="../../src/crypto/x509/verify.go.html#line-1369" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-1369">#L1369</a>: 		validPolicyNodeSet = pg.<b>validPolicyNodes</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..potentialParent^28fb8.cert^06298.html b/use/crypto/x509..potentialParent^28fb8.cert^06298.html
index fbdb7ecc728..31bc80241cf 100644
--- a/use/crypto/x509..potentialParent^28fb8.cert^06298.html
+++ b/use/crypto/x509..potentialParent^28fb8.cert^06298.html
@@ -15,14 +15,14 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-126">cert_pool.go#L126</a>: 	<b>cert</b>       *Certificate
-		<a href="../../src/crypto/x509/verify.go.html#line-741">verify.go#L741</a>: 		if candidate.<b>cert</b>.PublicKey == nil || alreadyInChain(candidate.<b>cert</b>, currentChain) {
-		<a href="../../src/crypto/x509/verify.go.html#line-745" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-745">#L745</a>: 		if err := c.CheckSignatureFrom(candidate.<b>cert</b>); err != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-748" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-748">#L748</a>: 				hintCert = candidate.<b>cert</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-753" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-753">#L753</a>: 		err = candidate.<b>cert</b>.isValid(certType, currentChain, opts)
-		<a href="../../src/crypto/x509/verify.go.html#line-757" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-757">#L757</a>: 				hintCert = candidate.<b>cert</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-766" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-766">#L766</a>: 					hintCert = candidate.<b>cert</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-774" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-774">#L774</a>: 			chains = append(chains, appendToFreshChain(currentChain, candidate.<b>cert</b>))
-		<a href="../../src/crypto/x509/verify.go.html#line-777" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-777">#L777</a>: 			childChains, err = candidate.<b>cert</b>.buildChains(appendToFreshChain(currentChain, candidate.<b>cert</b>), sigChecks, opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-746">verify.go#L746</a>: 		if candidate.<b>cert</b>.PublicKey == nil || alreadyInChain(candidate.<b>cert</b>, currentChain) {
+		<a href="../../src/crypto/x509/verify.go.html#line-750" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-750">#L750</a>: 		if err := c.CheckSignatureFrom(candidate.<b>cert</b>); err != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-753" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-753">#L753</a>: 				hintCert = candidate.<b>cert</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-758" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-758">#L758</a>: 		err = candidate.<b>cert</b>.isValid(certType, currentChain, opts)
+		<a href="../../src/crypto/x509/verify.go.html#line-762" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-762">#L762</a>: 				hintCert = candidate.<b>cert</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-771" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-771">#L771</a>: 					hintCert = candidate.<b>cert</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-779" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-779">#L779</a>: 			chains = append(chains, appendToFreshChain(currentChain, candidate.<b>cert</b>))
+		<a href="../../src/crypto/x509/verify.go.html#line-782" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-782">#L782</a>: 			childChains, err = candidate.<b>cert</b>.buildChains(appendToFreshChain(currentChain, candidate.<b>cert</b>), sigChecks, opts)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..potentialParent^28fb8.constraint^bd00a.html b/use/crypto/x509..potentialParent^28fb8.constraint^bd00a.html
index 7823eda58f4..76d80fcb377 100644
--- a/use/crypto/x509..potentialParent^28fb8.constraint^bd00a.html
+++ b/use/crypto/x509..potentialParent^28fb8.constraint^bd00a.html
@@ -15,8 +15,8 @@
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-127">cert_pool.go#L127</a>: 	<b>constraint</b> func([]*Certificate) error
-		<a href="../../src/crypto/x509/verify.go.html#line-762">verify.go#L762</a>: 		if candidate.<b>constraint</b> != nil {
-		<a href="../../src/crypto/x509/verify.go.html#line-763" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-763">#L763</a>: 			if err := candidate.<b>constraint</b>(currentChain); err != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-767">verify.go#L767</a>: 		if candidate.<b>constraint</b> != nil {
+		<a href="../../src/crypto/x509/verify.go.html#line-768" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-768">#L768</a>: 			if err := candidate.<b>constraint</b>(currentChain); err != nil {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..potentialParent^28fb8.html b/use/crypto/x509..potentialParent^28fb8.html
index 50eeb05c63a..dc9c7bb4937 100644
--- a/use/crypto/x509..potentialParent^28fb8.html
+++ b/use/crypto/x509..potentialParent^28fb8.html
@@ -21,8 +21,8 @@
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-155" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-155">#L155</a>: 			oneKeyID = append(oneKeyID, <b>potentialParent</b>{candidate, constraint})
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-157" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-157">#L157</a>: 			mismatchKeyID = append(mismatchKeyID, <b>potentialParent</b>{candidate, constraint})
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-165" class="path-duplicate">cert_pool.go</a><a href="../../src/crypto/x509/cert_pool.go.html#line-165">#L165</a>: 	candidates := make([]<b>potentialParent</b>, 0, found)
-		<a href="../../src/crypto/x509/verify.go.html#line-731">verify.go#L731</a>: 	considerCandidate := func(certType int, candidate <b>potentialParent</b>) {
-		<a href="../../src/crypto/x509/verify.go.html#line-785" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-785">#L785</a>: 		potentials []<b>potentialParent</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-736">verify.go#L736</a>: 	considerCandidate := func(certType int, candidate <b>potentialParent</b>) {
+		<a href="../../src/crypto/x509/verify.go.html#line-790" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-790">#L790</a>: 		potentials []<b>potentialParent</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..rfc2821Mailbox^1cdc3.String.html b/use/crypto/x509..rfc2821Mailbox^1cdc3.String.html
index 6363da9d65a..8735f7e4315 100644
--- a/use/crypto/x509..rfc2821Mailbox^1cdc3.String.html
+++ b/use/crypto/x509..rfc2821Mailbox^1cdc3.String.html
@@ -9,12 +9,12 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-256">String</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.rfc2821Mailbox^1cdc3.html#name-String">view implemented interface methods</a>)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-258">String</a></b></span><span style="font-size: large;"><i> (method, <a href="../../imp/crypto/x509.rfc2821Mailbox^1cdc3.html#name-String">view implemented interface methods</a>)</i></span>
 
 <span class="title">one use</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-256">verify.go#L256</a>: func (s rfc2821Mailbox) <b>String</b>() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-258">verify.go#L258</a>: func (s rfc2821Mailbox) <b>String</b>() string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html b/use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html
index 2a67a8c3ad1..ed16a3dcb75 100644
--- a/use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html
+++ b/use/crypto/x509..rfc2821Mailbox^1cdc3.domain^f2ff8.html
@@ -9,7 +9,7 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-253">domain</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-255">domain</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">10 uses</span>
 
@@ -19,9 +19,9 @@
 		<a href="../../src/crypto/x509/constraints.go.html#line-443" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-443">#L443</a>: 	constraint, found := ec.dnsConstraints.query(s.<b>domain</b>)
 		<a href="../../src/crypto/x509/constraints.go.html#line-500" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-500">#L500</a>: 		if !domainNameValid(e.<b>domain</b>, false) {
 		<a href="../../src/crypto/x509/constraints.go.html#line-611" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-611">#L611</a>: 		mailbox.<b>domain</b> = strings.ToLower(mailbox.<b>domain</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-253">verify.go#L253</a>: 	local, <b>domain</b> string
-		<a href="../../src/crypto/x509/verify.go.html#line-257" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-257">#L257</a>: 	return fmt.Sprintf("%s@%s", s.local, s.<b>domain</b>)
-		<a href="../../src/crypto/x509/verify.go.html#line-396" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-396">#L396</a>: 	mailbox.<b>domain</b> = in
+		<a href="../../src/crypto/x509/verify.go.html#line-255">verify.go#L255</a>: 	local, <b>domain</b> string
+		<a href="../../src/crypto/x509/verify.go.html#line-259" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-259">#L259</a>: 	return fmt.Sprintf("%s@%s", s.local, s.<b>domain</b>)
+		<a href="../../src/crypto/x509/verify.go.html#line-398" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-398">#L398</a>: 	mailbox.<b>domain</b> = in
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..rfc2821Mailbox^1cdc3.html b/use/crypto/x509..rfc2821Mailbox^1cdc3.html
index 26f2a3b793d..d754e51a062 100644
--- a/use/crypto/x509..rfc2821Mailbox^1cdc3.html
+++ b/use/crypto/x509..rfc2821Mailbox^1cdc3.html
@@ -9,7 +9,7 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a></b></span>
+<pre><code><span style="font-size:x-large;">type <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a></b></span>
 
 <span class="title">13 uses</span>
 
@@ -24,9 +24,9 @@
 		<a href="../../src/crypto/x509/constraints.go.html#line-521" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-521">#L521</a>: 			email: constraints[string, <b>rfc2821Mailbox</b>]{"email address", newEmailConstraints(c.PermittedEmailAddresses, true), newEmailConstraints(c.ExcludedEmailAddresses, false)},
 		<a href="../../src/crypto/x509/constraints.go.html#line-604" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-604">#L604</a>: func parseMailboxes(emails []string) ([]<b>rfc2821Mailbox</b>, error) {
 		<a href="../../src/crypto/x509/constraints.go.html#line-605" class="path-duplicate">constraints.go</a><a href="../../src/crypto/x509/constraints.go.html#line-605">#L605</a>: 	parsed := make([]<b>rfc2821Mailbox</b>, 0, len(emails))
-		<a href="../../src/crypto/x509/verify.go.html#line-252">verify.go#L252</a>: type <b>rfc2821Mailbox</b> struct {
-		<a href="../../src/crypto/x509/verify.go.html#line-256" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-256">#L256</a>: func (s <b>rfc2821Mailbox</b>) String() string {
-		<a href="../../src/crypto/x509/verify.go.html#line-264" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-264">#L264</a>: func parseRFC2821Mailbox(in string) (mailbox <b>rfc2821Mailbox</b>, ok bool) {
+		<a href="../../src/crypto/x509/verify.go.html#line-254">verify.go#L254</a>: type <b>rfc2821Mailbox</b> struct {
+		<a href="../../src/crypto/x509/verify.go.html#line-258" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-258">#L258</a>: func (s <b>rfc2821Mailbox</b>) String() string {
+		<a href="../../src/crypto/x509/verify.go.html#line-266" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-266">#L266</a>: func parseRFC2821Mailbox(in string) (mailbox <b>rfc2821Mailbox</b>, ok bool) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html b/use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html
index c22330fd62e..73eeb478bd1 100644
--- a/use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html
+++ b/use/crypto/x509..rfc2821Mailbox^1cdc3.local^25bf8.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-252">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-253">local</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-254">rfc2821Mailbox</a>.<a href="../../src/crypto/x509/verify.go.html#line-255">local</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/constraints.go.html#line-437">constraints.go#L437</a>: 			return fmt.Sprintf("%s@%s", s.<b>local</b>, s.domain), true
-		<a href="../../src/crypto/x509/verify.go.html#line-253">verify.go#L253</a>: 	<b>local</b>, domain string
-		<a href="../../src/crypto/x509/verify.go.html#line-257" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-257">#L257</a>: 	return fmt.Sprintf("%s@%s", s.<b>local</b>, s.domain)
-		<a href="../../src/crypto/x509/verify.go.html#line-395" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-395">#L395</a>: 	mailbox.<b>local</b> = string(localPartBytes)
+		<a href="../../src/crypto/x509/verify.go.html#line-255">verify.go#L255</a>: 	<b>local</b>, domain string
+		<a href="../../src/crypto/x509/verify.go.html#line-259" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-259">#L259</a>: 	return fmt.Sprintf("%s@%s", s.<b>local</b>, s.domain)
+		<a href="../../src/crypto/x509/verify.go.html#line-397" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-397">#L397</a>: 	mailbox.<b>local</b> = string(localPartBytes)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..rootCertificate^fc5b1.html b/use/crypto/x509..rootCertificate^fc5b1.html
index cb97c08a8d7..acaa82f9203 100644
--- a/use/crypto/x509..rootCertificate^fc5b1.html
+++ b/use/crypto/x509..rootCertificate^fc5b1.html
@@ -9,15 +9,15 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-246">rootCertificate</a></b></span>
+<pre><code><span style="font-size:x-large;">const <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-248">rootCertificate</a></b></span>
 
 <span class="title">4 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-246">verify.go#L246</a>: 	<b>rootCertificate</b>
-		<a href="../../src/crypto/x509/verify.go.html#line-473" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-473">#L473</a>: 	if certType == intermediateCertificate || certType == <b>rootCertificate</b> {
-		<a href="../../src/crypto/x509/verify.go.html#line-773" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-773">#L773</a>: 		case <b>rootCertificate</b>:
-		<a href="../../src/crypto/x509/verify.go.html#line-787" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-787">#L787</a>: 		{<b>rootCertificate</b>, opts.Roots.findPotentialParents(c)},
+		<a href="../../src/crypto/x509/verify.go.html#line-248">verify.go#L248</a>: 	<b>rootCertificate</b>
+		<a href="../../src/crypto/x509/verify.go.html#line-475" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-475">#L475</a>: 	if certType == intermediateCertificate || certType == <b>rootCertificate</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-778" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-778">#L778</a>: 		case <b>rootCertificate</b>:
+		<a href="../../src/crypto/x509/verify.go.html#line-792" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-792">#L792</a>: 		{<b>rootCertificate</b>, opts.Roots.findPotentialParents(c)},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..splitHostname^87988.html b/use/crypto/x509..splitHostname^87988.html
index 6b20021e2d5..3e9e3a549a7 100644
--- a/use/crypto/x509..splitHostname^87988.html
+++ b/use/crypto/x509..splitHostname^87988.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-977">splitHostname</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-982">splitHostname</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-113">verify.go#L113</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.CommonName, <b>splitHostname</b>(h.Host)) {
-		<a href="../../src/crypto/x509/verify.go.html#line-955" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-955">#L955</a>: 	hostParts := <b>splitHostname</b>(candidateName)
-		<a href="../../src/crypto/x509/verify.go.html#line-977" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-977">#L977</a>: func <b>splitHostname</b>(host string) []string {
+		<a href="../../src/crypto/x509/verify.go.html#line-115">verify.go#L115</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.CommonName, <b>splitHostname</b>(h.Host)) {
+		<a href="../../src/crypto/x509/verify.go.html#line-960" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-960">#L960</a>: 	hostParts := <b>splitHostname</b>(candidateName)
+		<a href="../../src/crypto/x509/verify.go.html#line-982" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-982">#L982</a>: func <b>splitHostname</b>(host string) []string {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..systemRootsErr^bb588.html b/use/crypto/x509..systemRootsErr^bb588.html
index 4fd682f7615..d465b80e438 100644
--- a/use/crypto/x509..systemRootsErr^bb588.html
+++ b/use/crypto/x509..systemRootsErr^bb588.html
@@ -20,7 +20,7 @@
 		<a href="../../src/crypto/x509/root.go.html#line-62" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-62">#L62</a>: 	systemRoots, <b>systemRootsErr</b> = fallbackRoots, nil
 		<a href="../../src/crypto/x509/root.go.html#line-97" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-97">#L97</a>: 	if systemRoots == nil &amp;&amp; <b>systemRootsErr</b> == nil {
 		<a href="../../src/crypto/x509/root.go.html#line-116" class="path-duplicate">root.go</a><a href="../../src/crypto/x509/root.go.html#line-116">#L116</a>: 	systemRoots, <b>systemRootsErr</b> = roots, nil
-		<a href="../../src/crypto/x509/verify.go.html#line-580">verify.go#L580</a>: 			return nil, SystemRootsError{<b>systemRootsErr</b>}
+		<a href="../../src/crypto/x509/verify.go.html#line-582">verify.go#L582</a>: 			return nil, SystemRootsError{<b>systemRootsErr</b>}
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..systemRootsPool^17bcc.html b/use/crypto/x509..systemRootsPool^17bcc.html
index b7fc4a94048..a904d843211 100644
--- a/use/crypto/x509..systemRootsPool^17bcc.html
+++ b/use/crypto/x509..systemRootsPool^17bcc.html
@@ -16,8 +16,8 @@
 	crypto/x509 (current package)
 		<a href="../../src/crypto/x509/cert_pool.go.html#line-118">cert_pool.go#L118</a>: 	if sysRoots := <b>systemRootsPool</b>(); sysRoots != nil {
 		<a href="../../src/crypto/x509/root.go.html#line-31">root.go#L31</a>: func <b>systemRootsPool</b>() *CertPool {
-		<a href="../../src/crypto/x509/verify.go.html#line-562">verify.go#L562</a>: 		systemPool := <b>systemRootsPool</b>()
-		<a href="../../src/crypto/x509/verify.go.html#line-578" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-578">#L578</a>: 		opts.Roots = <b>systemRootsPool</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-564">verify.go#L564</a>: 		systemPool := <b>systemRootsPool</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-580" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-580">#L580</a>: 		opts.Roots = <b>systemRootsPool</b>()
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..toLowerCaseASCII^66bdf.html b/use/crypto/x509..toLowerCaseASCII^66bdf.html
index 7f02b4575e9..c22e28f97cf 100644
--- a/use/crypto/x509..toLowerCaseASCII^66bdf.html
+++ b/use/crypto/x509..toLowerCaseASCII^66bdf.html
@@ -9,16 +9,16 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-898">toLowerCaseASCII</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-903">toLowerCaseASCII</a></b></span>
 
 <span class="title">6 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-867">verify.go#L867</a>: 	return <b>toLowerCaseASCII</b>(hostA) == <b>toLowerCaseASCII</b>(hostB)
-		<a href="../../src/crypto/x509/verify.go.html#line-871" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-871">#L871</a>: 	pattern = <b>toLowerCaseASCII</b>(pattern)
-		<a href="../../src/crypto/x509/verify.go.html#line-898" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-898">#L898</a>: func <b>toLowerCaseASCII</b>(in string) string {
-		<a href="../../src/crypto/x509/verify.go.html#line-953" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-953">#L953</a>: 	candidateName := <b>toLowerCaseASCII</b>(h) // Save allocations inside the loop.
-		<a href="../../src/crypto/x509/verify.go.html#line-978" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-978">#L978</a>: 	return strings.Split(<b>toLowerCaseASCII</b>(strings.TrimSuffix(host, ".")), ".")
+		<a href="../../src/crypto/x509/verify.go.html#line-872">verify.go#L872</a>: 	return <b>toLowerCaseASCII</b>(hostA) == <b>toLowerCaseASCII</b>(hostB)
+		<a href="../../src/crypto/x509/verify.go.html#line-876" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-876">#L876</a>: 	pattern = <b>toLowerCaseASCII</b>(pattern)
+		<a href="../../src/crypto/x509/verify.go.html#line-903" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-903">#L903</a>: func <b>toLowerCaseASCII</b>(in string) string {
+		<a href="../../src/crypto/x509/verify.go.html#line-958" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-958">#L958</a>: 	candidateName := <b>toLowerCaseASCII</b>(h) // Save allocations inside the loop.
+		<a href="../../src/crypto/x509/verify.go.html#line-983" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-983">#L983</a>: 	return strings.Split(<b>toLowerCaseASCII</b>(strings.TrimSuffix(host, ".")), ".")
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..validHostnameInput^1c66a.html b/use/crypto/x509..validHostnameInput^1c66a.html
index 9e0aabce997..597159cead9 100644
--- a/use/crypto/x509..validHostnameInput^1c66a.html
+++ b/use/crypto/x509..validHostnameInput^1c66a.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-809">validHostnameInput</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-814">validHostnameInput</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-809">verify.go#L809</a>: func <b>validHostnameInput</b>(host string) bool   { return validHostname(host, false) }
-		<a href="../../src/crypto/x509/verify.go.html#line-954" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-954">#L954</a>: 	validCandidateName := <b>validHostnameInput</b>(candidateName)
+		<a href="../../src/crypto/x509/verify.go.html#line-814">verify.go#L814</a>: func <b>validHostnameInput</b>(host string) bool   { return validHostname(host, false) }
+		<a href="../../src/crypto/x509/verify.go.html#line-959" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-959">#L959</a>: 	validCandidateName := <b>validHostnameInput</b>(candidateName)
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..validHostnamePattern^b6154.html b/use/crypto/x509..validHostnamePattern^b6154.html
index 4b9730e1ab6..c29de838cdc 100644
--- a/use/crypto/x509..validHostnamePattern^b6154.html
+++ b/use/crypto/x509..validHostnamePattern^b6154.html
@@ -9,13 +9,13 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-808">validHostnamePattern</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-813">validHostnamePattern</a></b></span>
 
 <span class="title">2 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-808">verify.go#L808</a>: func <b>validHostnamePattern</b>(host string) bool { return validHostname(host, true) }
-		<a href="../../src/crypto/x509/verify.go.html#line-963" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-963">#L963</a>: 		if validCandidateName &amp;&amp; <b>validHostnamePattern</b>(match) {
+		<a href="../../src/crypto/x509/verify.go.html#line-813">verify.go#L813</a>: func <b>validHostnamePattern</b>(host string) bool { return validHostname(host, true) }
+		<a href="../../src/crypto/x509/verify.go.html#line-968" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-968">#L968</a>: 		if validCandidateName &amp;&amp; <b>validHostnamePattern</b>(match) {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509..validHostname^6f68b.html b/use/crypto/x509..validHostname^6f68b.html
index 4386dbea82a..6de2671528f 100644
--- a/use/crypto/x509..validHostname^6f68b.html
+++ b/use/crypto/x509..validHostname^6f68b.html
@@ -9,14 +9,14 @@
 <script src="../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-814">validHostname</a></b></span>
+<pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/crypto/x509.html">crypto/x509</a>.<a href="../../src/crypto/x509/verify.go.html#line-819">validHostname</a></b></span>
 
 <span class="title">3 uses</span>
 
 	crypto/x509 (current package)
-		<a href="../../src/crypto/x509/verify.go.html#line-808">verify.go#L808</a>: func validHostnamePattern(host string) bool { return <b>validHostname</b>(host, true) }
-		<a href="../../src/crypto/x509/verify.go.html#line-809" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-809">#L809</a>: func validHostnameInput(host string) bool   { return <b>validHostname</b>(host, false) }
-		<a href="../../src/crypto/x509/verify.go.html#line-814" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-814">#L814</a>: func <b>validHostname</b>(host string, isPattern bool) bool {
+		<a href="../../src/crypto/x509/verify.go.html#line-813">verify.go#L813</a>: func validHostnamePattern(host string) bool { return <b>validHostname</b>(host, true) }
+		<a href="../../src/crypto/x509/verify.go.html#line-814" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-814">#L814</a>: func validHostnameInput(host string) bool   { return <b>validHostname</b>(host, false) }
+		<a href="../../src/crypto/x509/verify.go.html#line-819" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-819">#L819</a>: func <b>validHostname</b>(host string, isPattern bool) bool {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/crypto/x509/pkix..Extension.Id^12156.html b/use/crypto/x509/pkix..Extension.Id^12156.html
index 917fd8d2c91..d9d3af82144 100644
--- a/use/crypto/x509/pkix..Extension.Id^12156.html
+++ b/use/crypto/x509/pkix..Extension.Id^12156.html
@@ -26,8 +26,8 @@
 		<a href="../../../src/crypto/x509/parser.go.html#line-1233" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-1233">#L1233</a>: 					if ext.<b>Id</b>.Equal(oidExtensionReasonCode) {
 		<a href="../../../src/crypto/x509/parser.go.html#line-1271" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-1271">#L1271</a>: 			if ext.<b>Id</b>.Equal(oidExtensionAuthorityKeyId) {
 		<a href="../../../src/crypto/x509/parser.go.html#line-1276" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-1276">#L1276</a>: 			} else if ext.<b>Id</b>.Equal(oidExtensionCRLNumber) {
-		<a href="../../../src/crypto/x509/verify.go.html#line-682">verify.go#L682</a>: 		if ext.<b>Id</b>.Equal(oidExtensionSubjectAltName) {
-		<a href="../../../src/crypto/x509/verify.go.html#line-700" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-700">#L700</a>: 			if ext.<b>Id</b>.Equal(oidExtensionSubjectAltName) {
+		<a href="../../../src/crypto/x509/verify.go.html#line-687">verify.go#L687</a>: 		if ext.<b>Id</b>.Equal(oidExtensionSubjectAltName) {
+		<a href="../../../src/crypto/x509/verify.go.html#line-705" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-705">#L705</a>: 			if ext.<b>Id</b>.Equal(oidExtensionSubjectAltName) {
 		<a href="../../../src/crypto/x509/x509.go.html#line-967">x509.go#L967</a>: 		if e.<b>Id</b>.Equal(oidExtensionSubjectAltName) {
 		<a href="../../../src/crypto/x509/x509.go.html#line-1145" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-1145">#L1145</a>: 		if e.<b>Id</b>.Equal(oid) {
 		<a href="../../../src/crypto/x509/x509.go.html#line-1230" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-1230">#L1230</a>: 		ret[n].<b>Id</b> = oidExtensionSubjectKeyId
diff --git a/use/crypto/x509/pkix..Extension.Value.html b/use/crypto/x509/pkix..Extension.Value.html
index 5f12729294e..f8337a9b0f6 100644
--- a/use/crypto/x509/pkix..Extension.Value.html
+++ b/use/crypto/x509/pkix..Extension.Value.html
@@ -33,7 +33,7 @@
 		<a href="../../../src/crypto/x509/parser.go.html#line-845" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-845">#L845</a>: 			val := cryptobyte.String(e.<b>Value</b>)
 		<a href="../../../src/crypto/x509/parser.go.html#line-1234" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-1234">#L1234</a>: 						val := cryptobyte.String(ext.<b>Value</b>)
 		<a href="../../../src/crypto/x509/parser.go.html#line-1277" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-1277">#L1277</a>: 				value := cryptobyte.String(ext.<b>Value</b>)
-		<a href="../../../src/crypto/x509/verify.go.html#line-710">verify.go#L710</a>: 		if bytes.Equal(candidateSAN.<b>Value</b>, certSAN.<b>Value</b>) {
+		<a href="../../../src/crypto/x509/verify.go.html#line-715">verify.go#L715</a>: 		if bytes.Equal(candidateSAN.<b>Value</b>, certSAN.<b>Value</b>) {
 		<a href="../../../src/crypto/x509/x509.go.html#line-968">x509.go#L968</a>: 			return e.<b>Value</b>
 		<a href="../../../src/crypto/x509/x509.go.html#line-1231" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-1231">#L1231</a>: 		ret[n].<b>Value</b>, err = asn1.Marshal(subjectKeyId)
 		<a href="../../../src/crypto/x509/x509.go.html#line-1240" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-1240">#L1240</a>: 		ret[n].<b>Value</b>, err = asn1.Marshal(authKeyId{authorityKeyId})
diff --git a/use/crypto/x509/pkix..Extension.html b/use/crypto/x509/pkix..Extension.html
index 0d714ec034f..db3fb2b6357 100644
--- a/use/crypto/x509/pkix..Extension.html
+++ b/use/crypto/x509/pkix..Extension.html
@@ -23,8 +23,8 @@
 		<a href="../../../src/crypto/x509/parser.go.html#line-232" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-232">#L232</a>: 	var ext pkix.<b>Extension</b>
 		<a href="../../../src/crypto/x509/parser.go.html#line-443" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-443">#L443</a>: func parseAuthorityKeyIdentifier(e pkix.<b>Extension</b>) ([]byte, error) {
 		<a href="../../../src/crypto/x509/parser.go.html#line-533" class="path-duplicate">parser.go</a><a href="../../../src/crypto/x509/parser.go.html#line-533">#L533</a>: func parseNameConstraintsExtension(out *Certificate, e pkix.<b>Extension</b>) (unhandled bool, err error) {
-		<a href="../../../src/crypto/x509/verify.go.html#line-680">verify.go#L680</a>: 	var candidateSAN *pkix.<b>Extension</b>
-		<a href="../../../src/crypto/x509/verify.go.html#line-698" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-698">#L698</a>: 		var certSAN *pkix.<b>Extension</b>
+		<a href="../../../src/crypto/x509/verify.go.html#line-685">verify.go#L685</a>: 	var candidateSAN *pkix.<b>Extension</b>
+		<a href="../../../src/crypto/x509/verify.go.html#line-703" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-703">#L703</a>: 		var certSAN *pkix.<b>Extension</b>
 		<a href="../../../src/crypto/x509/x509.go.html#line-191">x509.go#L191</a>: 	Extensions         []pkix.<b>Extension</b> `asn1:"omitempty,optional,explicit,tag:3"`
 		<a href="../../../src/crypto/x509/x509.go.html#line-728" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-728">#L728</a>: 	Extensions []pkix.<b>Extension</b>
 		<a href="../../../src/crypto/x509/x509.go.html#line-734" class="path-duplicate">x509.go</a><a href="../../../src/crypto/x509/x509.go.html#line-734">#L734</a>: 	ExtraExtensions []pkix.<b>Extension</b>
diff --git a/use/crypto/x509/pkix..Name.CommonName.html b/use/crypto/x509/pkix..Name.CommonName.html
index 3492794a590..2e2e597bb93 100644
--- a/use/crypto/x509/pkix..Name.CommonName.html
+++ b/use/crypto/x509/pkix..Name.CommonName.html
@@ -20,8 +20,8 @@
 		<a href="../../../src/crypto/x509/pkix/pkix.go.html#line-235" class="path-duplicate">pkix.go</a><a href="../../../src/crypto/x509/pkix/pkix.go.html#line-235">#L235</a>: 		ret = n.appendRDNs(ret, []string{n.<b>CommonName</b>}, oidCommonName)
 
 	<a href="../../../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../../../src/crypto/x509/verify.go.html#line-113">verify.go#L113</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.<b>CommonName</b>, splitHostname(h.Host)) {
-		<a href="../../../src/crypto/x509/verify.go.html#line-159" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-159">#L159</a>: 		certName := e.hintCert.Subject.<b>CommonName</b>
+		<a href="../../../src/crypto/x509/verify.go.html#line-115">verify.go#L115</a>: 	if !c.hasSANExtension() &amp;&amp; matchHostnames(c.Subject.<b>CommonName</b>, splitHostname(h.Host)) {
+		<a href="../../../src/crypto/x509/verify.go.html#line-161" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-161">#L161</a>: 		certName := e.hintCert.Subject.<b>CommonName</b>
 
 	<a href="../../../pkg/crypto/tls.html">crypto/tls</a>
 		<a href="../../../src/crypto/tls/common.go.html#line-1574">common.go#L1574</a>: 		if x509Cert.Subject.<b>CommonName</b> != "" &amp;&amp; len(x509Cert.DNSNames) == 0 {
diff --git a/use/crypto/x509/pkix..Name.Organization.html b/use/crypto/x509/pkix..Name.Organization.html
index cd3d311d9eb..09a521ed195 100644
--- a/use/crypto/x509/pkix..Name.Organization.html
+++ b/use/crypto/x509/pkix..Name.Organization.html
@@ -19,8 +19,8 @@
 		<a href="../../../src/crypto/x509/pkix/pkix.go.html#line-232" class="path-duplicate">pkix.go</a><a href="../../../src/crypto/x509/pkix/pkix.go.html#line-232">#L232</a>: 	ret = n.appendRDNs(ret, n.<b>Organization</b>, oidOrganization)
 
 	<a href="../../../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../../../src/crypto/x509/verify.go.html#line-161">verify.go#L161</a>: 			if len(e.hintCert.Subject.<b>Organization</b>) &gt; 0 {
-		<a href="../../../src/crypto/x509/verify.go.html#line-162" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-162">#L162</a>: 				certName = e.hintCert.Subject.<b>Organization</b>[0]
+		<a href="../../../src/crypto/x509/verify.go.html#line-163">verify.go#L163</a>: 			if len(e.hintCert.Subject.<b>Organization</b>) &gt; 0 {
+		<a href="../../../src/crypto/x509/verify.go.html#line-164" class="path-duplicate">verify.go</a><a href="../../../src/crypto/x509/verify.go.html#line-164">#L164</a>: 				certName = e.hintCert.Subject.<b>Organization</b>[0]
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/encoding/asn1..ObjectIdentifier.Equal.html b/use/encoding/asn1..ObjectIdentifier.Equal.html
index 816c8beb832..810461138c1 100644
--- a/use/encoding/asn1..ObjectIdentifier.Equal.html
+++ b/use/encoding/asn1..ObjectIdentifier.Equal.html
@@ -32,8 +32,8 @@
 		<a href="../../src/crypto/x509/pkcs8.go.html#line-57" class="path-duplicate">pkcs8.go</a><a href="../../src/crypto/x509/pkcs8.go.html#line-57">#L57</a>: 	case privKey.Algo.Algorithm.<b>Equal</b>(oidPublicKeyECDSA):
 		<a href="../../src/crypto/x509/pkcs8.go.html#line-69" class="path-duplicate">pkcs8.go</a><a href="../../src/crypto/x509/pkcs8.go.html#line-69">#L69</a>: 	case privKey.Algo.Algorithm.<b>Equal</b>(oidPublicKeyEd25519):
 		<a href="../../src/crypto/x509/pkcs8.go.html#line-82" class="path-duplicate">pkcs8.go</a><a href="../../src/crypto/x509/pkcs8.go.html#line-82">#L82</a>: 	case privKey.Algo.Algorithm.<b>Equal</b>(oidPublicKeyX25519):
-		<a href="../../src/crypto/x509/verify.go.html#line-682">verify.go#L682</a>: 		if ext.Id.<b>Equal</b>(oidExtensionSubjectAltName) {
-		<a href="../../src/crypto/x509/verify.go.html#line-700" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-700">#L700</a>: 			if ext.Id.<b>Equal</b>(oidExtensionSubjectAltName) {
+		<a href="../../src/crypto/x509/verify.go.html#line-687">verify.go#L687</a>: 		if ext.Id.<b>Equal</b>(oidExtensionSubjectAltName) {
+		<a href="../../src/crypto/x509/verify.go.html#line-705" class="path-duplicate">verify.go</a><a href="../../src/crypto/x509/verify.go.html#line-705">#L705</a>: 			if ext.Id.<b>Equal</b>(oidExtensionSubjectAltName) {
 		<a href="../../src/crypto/x509/x509.go.html#line-417">x509.go#L417</a>: 	if ai.Algorithm.<b>Equal</b>(oidSignatureEd25519) {
 		<a href="../../src/crypto/x509/x509.go.html#line-425" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-425">#L425</a>: 	if !ai.Algorithm.<b>Equal</b>(oidSignatureRSAPSS) {
 		<a href="../../src/crypto/x509/x509.go.html#line-427" class="path-duplicate">x509.go</a><a href="../../src/crypto/x509/x509.go.html#line-427">#L427</a>: 			if ai.Algorithm.<b>Equal</b>(details.oid) {
diff --git a/use/encoding/hex..EncodeToString.html b/use/encoding/hex..EncodeToString.html
index d30d21c1948..63c8a81496e 100644
--- a/use/encoding/hex..EncodeToString.html
+++ b/use/encoding/hex..EncodeToString.html
@@ -11,13 +11,14 @@
 
 <pre><code><span style="font-size:x-large;">func <b><a href="../../pkg/encoding/hex.html">encoding/hex</a>.<a href="../../src/encoding/hex/hex.go.html#line-126">EncodeToString</a></b></span>
 
-<span class="title">11 uses</span>
+<span class="title">12 uses</span>
 
 	encoding/hex (current package)
 		<a href="../../src/encoding/hex/hex.go.html#line-126">hex.go#L126</a>: func <b>EncodeToString</b>(src []byte) string {
 
 	<a href="../../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../../src/crypto/x509/pem_decrypt.go.html#line-228">pem_decrypt.go#L228</a>: 			"DEK-Info":  ciph.name + "," + hex.<b>EncodeToString</b>(iv),
+		<a href="../../src/crypto/x509/verify.go.html#line-1425">verify.go#L1425</a>: 		if _, ok := distrustedSPKIHashes[hex.<b>EncodeToString</b>(h[:])]; ok {
 
 	<a href="../../pkg/crypto/x509/pkix.html">crypto/x509/pkix</a>
 		<a href="../../src/crypto/x509/pkix/pkix.go.html#line-57">pkix.go#L57</a>: 					s += oidString + "=#" + hex.<b>EncodeToString</b>(derBytes)
diff --git a/use/errors..New.html b/use/errors..New.html
index 73fb75d1e22..2495c6d8a7f 100644
--- a/use/errors..New.html
+++ b/use/errors..New.html
@@ -867,9 +867,9 @@
 		<a href="../src/crypto/x509/sec1.go.html#line-96" class="path-duplicate">sec1.go</a><a href="../src/crypto/x509/sec1.go.html#line-96">#L96</a>: 		return nil, errors.<b>New</b>("x509: failed to parse EC private key: " + err.Error())
 		<a href="../src/crypto/x509/sec1.go.html#line-109" class="path-duplicate">sec1.go</a><a href="../src/crypto/x509/sec1.go.html#line-109">#L109</a>: 		return nil, errors.<b>New</b>("x509: unknown elliptic curve")
 		<a href="../src/crypto/x509/sec1.go.html#line-119" class="path-duplicate">sec1.go</a><a href="../src/crypto/x509/sec1.go.html#line-119">#L119</a>: 			return nil, errors.<b>New</b>("x509: invalid private key length")
-		<a href="../src/crypto/x509/verify.go.html#line-189">verify.go#L189</a>: var errNotParsed = errors.<b>New</b>("x509: missing ASN.1 contents; use ParseCertificate")
-		<a href="../src/crypto/x509/verify.go.html#line-475" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-475">#L475</a>: 			return errors.<b>New</b>("x509: internal error: empty chain when appending CA cert")
-		<a href="../src/crypto/x509/verify.go.html#line-723" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-723">#L723</a>: var errSignatureLimit = errors.<b>New</b>("x509: signature check attempts limit reached while verifying certificate chain")
+		<a href="../src/crypto/x509/verify.go.html#line-191">verify.go#L191</a>: var errNotParsed = errors.<b>New</b>("x509: missing ASN.1 contents; use ParseCertificate")
+		<a href="../src/crypto/x509/verify.go.html#line-477" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-477">#L477</a>: 			return errors.<b>New</b>("x509: internal error: empty chain when appending CA cert")
+		<a href="../src/crypto/x509/verify.go.html#line-728" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-728">#L728</a>: var errSignatureLimit = errors.<b>New</b>("x509: signature check attempts limit reached while verifying certificate chain")
 		<a href="../src/crypto/x509/x509.go.html#line-76">x509.go#L76</a>: 			return nil, errors.<b>New</b>("x509: failed to parse public key (use ParsePKCS1PublicKey instead for this key format)")
 		<a href="../src/crypto/x509/x509.go.html#line-80" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-80">#L80</a>: 		return nil, errors.<b>New</b>("x509: trailing data after ASN.1 of public-key")
 		<a href="../src/crypto/x509/x509.go.html#line-102" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-102">#L102</a>: 			return nil, pkix.AlgorithmIdentifier{}, errors.<b>New</b>("x509: unsupported elliptic curve")
diff --git a/use/fmt..Errorf.html b/use/fmt..Errorf.html
index d7e070ff948..377d316384b 100644
--- a/use/fmt..Errorf.html
+++ b/use/fmt..Errorf.html
@@ -119,7 +119,7 @@
 		<a href="../src/crypto/x509/pkcs8.go.html#line-157" class="path-duplicate">pkcs8.go</a><a href="../src/crypto/x509/pkcs8.go.html#line-157">#L157</a>: 				return nil, fmt.<b>Errorf</b>("x509: failed to marshal private key: %v", err)
 		<a href="../src/crypto/x509/pkcs8.go.html#line-180" class="path-duplicate">pkcs8.go</a><a href="../src/crypto/x509/pkcs8.go.html#line-180">#L180</a>: 		return nil, fmt.<b>Errorf</b>("x509: unknown key type while marshaling PKCS#8: %T", key)
 		<a href="../src/crypto/x509/sec1.go.html#line-99">sec1.go#L99</a>: 		return nil, fmt.<b>Errorf</b>("x509: unknown EC private key version %d", privKey.Version)
-		<a href="../src/crypto/x509/verify.go.html#line-551">verify.go#L551</a>: 			return nil, fmt.<b>Errorf</b>("crypto/x509: error fetching intermediate: %w", err)
+		<a href="../src/crypto/x509/verify.go.html#line-553">verify.go#L553</a>: 			return nil, fmt.<b>Errorf</b>("crypto/x509: error fetching intermediate: %w", err)
 		<a href="../src/crypto/x509/x509.go.html#line-136">x509.go#L136</a>: 		return nil, pkix.AlgorithmIdentifier{}, fmt.<b>Errorf</b>("x509: unsupported public key type: %T", pub)
 		<a href="../src/crypto/x509/x509.go.html#line-975" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-975">#L975</a>: 	return fmt.<b>Errorf</b>("x509: signature algorithm specifies an %s public key, but have public key of type %T", expectedPubKeyAlgo.String(), pubKey)
 		<a href="../src/crypto/x509/x509.go.html#line-1190" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-1190">#L1190</a>: 			return fmt.<b>Errorf</b>("x509: %q cannot be encoded as an IA5String", s)
diff --git a/use/fmt..Sprintf.html b/use/fmt..Sprintf.html
index adeeccc1a34..83b9c33a767 100644
--- a/use/fmt..Sprintf.html
+++ b/use/fmt..Sprintf.html
@@ -29,16 +29,16 @@
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/constraints.go.html#line-437">constraints.go#L437</a>: 			return fmt.<b>Sprintf</b>("%s@%s", s.local, s.domain), true
-		<a href="../src/crypto/x509/verify.go.html#line-95">verify.go#L95</a>: 			s = fmt.<b>Sprintf</b>("%s: %s", s, e.Detail)
-		<a href="../src/crypto/x509/verify.go.html#line-124" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-124">#L124</a>: 			return fmt.<b>Sprintf</b>("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.IPAddresses), h.Host)
-		<a href="../src/crypto/x509/verify.go.html#line-134" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-134">#L134</a>: 			return fmt.<b>Sprintf</b>("x509: certificate is valid for %d names, but none matched %s", len(c.DNSNames), h.Host)
-		<a href="../src/crypto/x509/verify.go.html#line-167" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-167">#L167</a>: 		s += fmt.<b>Sprintf</b>(" (possibly because of %q while trying to verify candidate authority certificate %q)", e.hintErr, certName)
-		<a href="../src/crypto/x509/verify.go.html#line-257" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-257">#L257</a>: 	return fmt.<b>Sprintf</b>("%s@%s", s.local, s.domain)
-		<a href="../src/crypto/x509/verify.go.html#line-463" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-463">#L463</a>: 			Detail: fmt.<b>Sprintf</b>("current time %s is before %s", now.Format(time.RFC3339), c.NotBefore.Format(time.RFC3339)),
-		<a href="../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			Detail: fmt.<b>Sprintf</b>("current time %s is after %s", now.Format(time.RFC3339), c.NotAfter.Format(time.RFC3339)),
-		<a href="../src/crypto/x509/verify.go.html#line-651" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-651">#L651</a>: 			details = append(details, fmt.<b>Sprintf</b>("%d candidate chains with incompatible key usage", incompatibleKeyUsageChains))
-		<a href="../src/crypto/x509/verify.go.html#line-654" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-654">#L654</a>: 			details = append(details, fmt.<b>Sprintf</b>("%d candidate chains with invalid policies", invalidPoliciesChains))
-		<a href="../src/crypto/x509/verify.go.html#line-1038" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-1038">#L1038</a>: 		panic(fmt.<b>Sprintf</b>("OIDFromInts(%v) unexpected error: %v", ints, err))
+		<a href="../src/crypto/x509/verify.go.html#line-97">verify.go#L97</a>: 			s = fmt.<b>Sprintf</b>("%s: %s", s, e.Detail)
+		<a href="../src/crypto/x509/verify.go.html#line-126" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-126">#L126</a>: 			return fmt.<b>Sprintf</b>("x509: certificate is valid for %d IP SANs, but none matched %s", len(c.IPAddresses), h.Host)
+		<a href="../src/crypto/x509/verify.go.html#line-136" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-136">#L136</a>: 			return fmt.<b>Sprintf</b>("x509: certificate is valid for %d names, but none matched %s", len(c.DNSNames), h.Host)
+		<a href="../src/crypto/x509/verify.go.html#line-169" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-169">#L169</a>: 		s += fmt.<b>Sprintf</b>(" (possibly because of %q while trying to verify candidate authority certificate %q)", e.hintErr, certName)
+		<a href="../src/crypto/x509/verify.go.html#line-259" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-259">#L259</a>: 	return fmt.<b>Sprintf</b>("%s@%s", s.local, s.domain)
+		<a href="../src/crypto/x509/verify.go.html#line-465" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-465">#L465</a>: 			Detail: fmt.<b>Sprintf</b>("current time %s is before %s", now.Format(time.RFC3339), c.NotBefore.Format(time.RFC3339)),
+		<a href="../src/crypto/x509/verify.go.html#line-471" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-471">#L471</a>: 			Detail: fmt.<b>Sprintf</b>("current time %s is after %s", now.Format(time.RFC3339), c.NotAfter.Format(time.RFC3339)),
+		<a href="../src/crypto/x509/verify.go.html#line-656" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-656">#L656</a>: 			details = append(details, fmt.<b>Sprintf</b>("%d candidate chains with incompatible key usage", incompatibleKeyUsageChains))
+		<a href="../src/crypto/x509/verify.go.html#line-659" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-659">#L659</a>: 			details = append(details, fmt.<b>Sprintf</b>("%d candidate chains with invalid policies", invalidPoliciesChains))
+		<a href="../src/crypto/x509/verify.go.html#line-1043" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-1043">#L1043</a>: 		panic(fmt.<b>Sprintf</b>("OIDFromInts(%v) unexpected error: %v", ints, err))
 		<a href="../src/crypto/x509/x509.go.html#line-901">x509.go#L901</a>: 	return fmt.<b>Sprintf</b>("x509: cannot verify signature: insecure algorithm %v", SignatureAlgorithm(e))
 
 	<a href="../pkg/encoding/asn1.html">encoding/asn1</a>
diff --git a/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html b/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
index 0566dcf9149..611b56e70bc 100644
--- a/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
+++ b/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
@@ -9,14 +9,14 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">byteorder.go#L13</a>: 	<b>Uint32</b>([]byte) uint32
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-55">hwcap_linux.go#L55</a>: 			tag = uint(bo.<b>Uint32</b>(buf[0:]))
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56" class="path-duplicate">hwcap_linux.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56">#L56</a>: 			val = uint(bo.<b>Uint32</b>(buf[4:]))
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">byteorder.go#L13</a>: 	<b>Uint32</b>([]byte) uint32
+		<a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-55">hwcap_linux.go#L55</a>: 			tag = uint(bo.<b>Uint32</b>(buf[0:]))
+		<a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56" class="path-duplicate">hwcap_linux.go</a><a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56">#L56</a>: 			val = uint(bo.<b>Uint32</b>(buf[4:]))
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html b/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
index 7829edccf43..2100ce9ebfd 100644
--- a/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
+++ b/use/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
@@ -9,14 +9,14 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">byteorder.go#L14</a>: 	<b>Uint64</b>([]byte) uint64
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-59">hwcap_linux.go#L59</a>: 			tag = uint(bo.<b>Uint64</b>(buf[0:]))
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60" class="path-duplicate">hwcap_linux.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60">#L60</a>: 			val = uint(bo.<b>Uint64</b>(buf[8:]))
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">byteorder.go#L14</a>: 	<b>Uint64</b>([]byte) uint64
+		<a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-59">hwcap_linux.go#L59</a>: 			tag = uint(bo.<b>Uint64</b>(buf[0:]))
+		<a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60" class="path-duplicate">hwcap_linux.go</a><a href="../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60">#L60</a>: 			val = uint(bo.<b>Uint64</b>(buf[8:]))
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..option^a11a7.Enable.html b/use/golang.org/x/sys/cpu..option^a11a7.Enable.html
index 641ac38612f..b6e217c00c4 100644
--- a/use/golang.org/x/sys/cpu..option^a11a7.Enable.html
+++ b/use/golang.org/x/sys/cpu..option^a11a7.Enable.html
@@ -9,17 +9,17 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">Enable</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">Enable</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">6 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">cpu.go#L266</a>: 	<b>Enable</b>    bool // whether feature should be enabled
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305">#L305</a>: 				options[i].<b>Enable</b> = enable || options[i].Required
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-313" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-313">#L313</a>: 				options[i].<b>Enable</b> = enable
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326">#L326</a>: 		if o.<b>Enable</b> &amp;&amp; !*o.Feature {
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if !o.<b>Enable</b> &amp;&amp; o.Required {
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		*o.Feature = o.<b>Enable</b>
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">cpu.go#L271</a>: 	<b>Enable</b>    bool // whether feature should be enabled
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310">#L310</a>: 				options[i].<b>Enable</b> = enable || options[i].Required
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-318" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-318">#L318</a>: 				options[i].<b>Enable</b> = enable
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if o.<b>Enable</b> &amp;&amp; !*o.Feature {
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		if !o.<b>Enable</b> &amp;&amp; o.Required {
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341">#L341</a>: 		*o.Feature = o.<b>Enable</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..option^a11a7.Feature.html b/use/golang.org/x/sys/cpu..option^a11a7.Feature.html
index 0e6be50d041..8610bbe21f2 100644
--- a/use/golang.org/x/sys/cpu..option^a11a7.Feature.html
+++ b/use/golang.org/x/sys/cpu..option^a11a7.Feature.html
@@ -9,59 +9,59 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">Feature</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">Feature</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">48 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">cpu.go#L264</a>: 	<b>Feature</b>   *bool
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326">#L326</a>: 		if o.Enable &amp;&amp; !*o.<b>Feature</b> {
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		*o.<b>Feature</b> = o.Enable
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{Name: "adx", <b>Feature</b>: &amp;X86.HasADX},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{Name: "aes", <b>Feature</b>: &amp;X86.HasAES},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{Name: "avx", <b>Feature</b>: &amp;X86.HasAVX},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{Name: "avx2", <b>Feature</b>: &amp;X86.HasAVX2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{Name: "avx512", <b>Feature</b>: &amp;X86.HasAVX512},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{Name: "avx512f", <b>Feature</b>: &amp;X86.HasAVX512F},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{Name: "avx512cd", <b>Feature</b>: &amp;X86.HasAVX512CD},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{Name: "avx512er", <b>Feature</b>: &amp;X86.HasAVX512ER},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{Name: "avx512pf", <b>Feature</b>: &amp;X86.HasAVX512PF},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{Name: "avx512vl", <b>Feature</b>: &amp;X86.HasAVX512VL},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{Name: "avx512bw", <b>Feature</b>: &amp;X86.HasAVX512BW},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{Name: "avx512dq", <b>Feature</b>: &amp;X86.HasAVX512DQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{Name: "avx512ifma", <b>Feature</b>: &amp;X86.HasAVX512IFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{Name: "avx512vbmi", <b>Feature</b>: &amp;X86.HasAVX512VBMI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{Name: "avx512vnniw", <b>Feature</b>: &amp;X86.HasAVX5124VNNIW},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{Name: "avx5124fmaps", <b>Feature</b>: &amp;X86.HasAVX5124FMAPS},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{Name: "avx512vpopcntdq", <b>Feature</b>: &amp;X86.HasAVX512VPOPCNTDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{Name: "avx512vpclmulqdq", <b>Feature</b>: &amp;X86.HasAVX512VPCLMULQDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{Name: "avx512vnni", <b>Feature</b>: &amp;X86.HasAVX512VNNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{Name: "avx512gfni", <b>Feature</b>: &amp;X86.HasAVX512GFNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{Name: "avx512vaes", <b>Feature</b>: &amp;X86.HasAVX512VAES},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{Name: "avx512vbmi2", <b>Feature</b>: &amp;X86.HasAVX512VBMI2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{Name: "avx512bitalg", <b>Feature</b>: &amp;X86.HasAVX512BITALG},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{Name: "avx512bf16", <b>Feature</b>: &amp;X86.HasAVX512BF16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{Name: "amxtile", <b>Feature</b>: &amp;X86.HasAMXTile},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{Name: "amxint8", <b>Feature</b>: &amp;X86.HasAMXInt8},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{Name: "amxbf16", <b>Feature</b>: &amp;X86.HasAMXBF16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{Name: "bmi1", <b>Feature</b>: &amp;X86.HasBMI1},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{Name: "bmi2", <b>Feature</b>: &amp;X86.HasBMI2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{Name: "cx16", <b>Feature</b>: &amp;X86.HasCX16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{Name: "erms", <b>Feature</b>: &amp;X86.HasERMS},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{Name: "fma", <b>Feature</b>: &amp;X86.HasFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{Name: "osxsave", <b>Feature</b>: &amp;X86.HasOSXSAVE},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{Name: "pclmulqdq", <b>Feature</b>: &amp;X86.HasPCLMULQDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{Name: "popcnt", <b>Feature</b>: &amp;X86.HasPOPCNT},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{Name: "rdrand", <b>Feature</b>: &amp;X86.HasRDRAND},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{Name: "rdseed", <b>Feature</b>: &amp;X86.HasRDSEED},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{Name: "sse3", <b>Feature</b>: &amp;X86.HasSSE3},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{Name: "sse41", <b>Feature</b>: &amp;X86.HasSSE41},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{Name: "sse42", <b>Feature</b>: &amp;X86.HasSSE42},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{Name: "ssse3", <b>Feature</b>: &amp;X86.HasSSSE3},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{Name: "avxifma", <b>Feature</b>: &amp;X86.HasAVXIFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{Name: "avxvnni", <b>Feature</b>: &amp;X86.HasAVXVNNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{Name: "avxvnniint8", <b>Feature</b>: &amp;X86.HasAVXVNNIInt8},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{Name: "sse2", <b>Feature</b>: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">cpu.go#L269</a>: 	<b>Feature</b>   *bool
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if o.Enable &amp;&amp; !*o.<b>Feature</b> {
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341">#L341</a>: 		*o.<b>Feature</b> = o.Enable
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{Name: "adx", <b>Feature</b>: &amp;X86.HasADX},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{Name: "aes", <b>Feature</b>: &amp;X86.HasAES},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{Name: "avx", <b>Feature</b>: &amp;X86.HasAVX},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{Name: "avx2", <b>Feature</b>: &amp;X86.HasAVX2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{Name: "avx512", <b>Feature</b>: &amp;X86.HasAVX512},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{Name: "avx512f", <b>Feature</b>: &amp;X86.HasAVX512F},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{Name: "avx512cd", <b>Feature</b>: &amp;X86.HasAVX512CD},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{Name: "avx512er", <b>Feature</b>: &amp;X86.HasAVX512ER},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{Name: "avx512pf", <b>Feature</b>: &amp;X86.HasAVX512PF},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{Name: "avx512vl", <b>Feature</b>: &amp;X86.HasAVX512VL},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{Name: "avx512bw", <b>Feature</b>: &amp;X86.HasAVX512BW},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{Name: "avx512dq", <b>Feature</b>: &amp;X86.HasAVX512DQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{Name: "avx512ifma", <b>Feature</b>: &amp;X86.HasAVX512IFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{Name: "avx512vbmi", <b>Feature</b>: &amp;X86.HasAVX512VBMI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{Name: "avx512vnniw", <b>Feature</b>: &amp;X86.HasAVX5124VNNIW},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{Name: "avx5124fmaps", <b>Feature</b>: &amp;X86.HasAVX5124FMAPS},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{Name: "avx512vpopcntdq", <b>Feature</b>: &amp;X86.HasAVX512VPOPCNTDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{Name: "avx512vpclmulqdq", <b>Feature</b>: &amp;X86.HasAVX512VPCLMULQDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{Name: "avx512vnni", <b>Feature</b>: &amp;X86.HasAVX512VNNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{Name: "avx512gfni", <b>Feature</b>: &amp;X86.HasAVX512GFNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{Name: "avx512vaes", <b>Feature</b>: &amp;X86.HasAVX512VAES},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{Name: "avx512vbmi2", <b>Feature</b>: &amp;X86.HasAVX512VBMI2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{Name: "avx512bitalg", <b>Feature</b>: &amp;X86.HasAVX512BITALG},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{Name: "avx512bf16", <b>Feature</b>: &amp;X86.HasAVX512BF16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{Name: "amxtile", <b>Feature</b>: &amp;X86.HasAMXTile},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{Name: "amxint8", <b>Feature</b>: &amp;X86.HasAMXInt8},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{Name: "amxbf16", <b>Feature</b>: &amp;X86.HasAMXBF16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{Name: "bmi1", <b>Feature</b>: &amp;X86.HasBMI1},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{Name: "bmi2", <b>Feature</b>: &amp;X86.HasBMI2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{Name: "cx16", <b>Feature</b>: &amp;X86.HasCX16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{Name: "erms", <b>Feature</b>: &amp;X86.HasERMS},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{Name: "fma", <b>Feature</b>: &amp;X86.HasFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{Name: "osxsave", <b>Feature</b>: &amp;X86.HasOSXSAVE},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{Name: "pclmulqdq", <b>Feature</b>: &amp;X86.HasPCLMULQDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{Name: "popcnt", <b>Feature</b>: &amp;X86.HasPOPCNT},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{Name: "rdrand", <b>Feature</b>: &amp;X86.HasRDRAND},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{Name: "rdseed", <b>Feature</b>: &amp;X86.HasRDSEED},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{Name: "sse3", <b>Feature</b>: &amp;X86.HasSSE3},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{Name: "sse41", <b>Feature</b>: &amp;X86.HasSSE41},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{Name: "sse42", <b>Feature</b>: &amp;X86.HasSSE42},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{Name: "ssse3", <b>Feature</b>: &amp;X86.HasSSSE3},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{Name: "avxifma", <b>Feature</b>: &amp;X86.HasAVXIFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{Name: "avxvnni", <b>Feature</b>: &amp;X86.HasAVXVNNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{Name: "avxvnniint8", <b>Feature</b>: &amp;X86.HasAVXVNNIInt8},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{Name: "sse2", <b>Feature</b>: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..option^a11a7.Name.html b/use/golang.org/x/sys/cpu..option^a11a7.Name.html
index 953e1346e5d..a3e6adc087b 100644
--- a/use/golang.org/x/sys/cpu..option^a11a7.Name.html
+++ b/use/golang.org/x/sys/cpu..option^a11a7.Name.html
@@ -9,60 +9,60 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">Name</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">Name</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">49 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">cpu.go#L263</a>: 	<b>Name</b>      string
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-311" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-311">#L311</a>: 			if options[i].<b>Name</b> == key {
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-327" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-327">#L327</a>: 			print("GODEBUG sys/cpu: can not enable \"", o.<b>Name</b>, "\", missing CPU support\n")
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-332" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-332">#L332</a>: 			print("GODEBUG sys/cpu: can not disable \"", o.<b>Name</b>, "\", required CPU feature\n")
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{<b>Name</b>: "adx", Feature: &amp;X86.HasADX},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{<b>Name</b>: "aes", Feature: &amp;X86.HasAES},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{<b>Name</b>: "avx", Feature: &amp;X86.HasAVX},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{<b>Name</b>: "avx2", Feature: &amp;X86.HasAVX2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{<b>Name</b>: "avx512", Feature: &amp;X86.HasAVX512},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{<b>Name</b>: "avx512f", Feature: &amp;X86.HasAVX512F},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{<b>Name</b>: "avx512cd", Feature: &amp;X86.HasAVX512CD},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{<b>Name</b>: "avx512er", Feature: &amp;X86.HasAVX512ER},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{<b>Name</b>: "avx512pf", Feature: &amp;X86.HasAVX512PF},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{<b>Name</b>: "avx512vl", Feature: &amp;X86.HasAVX512VL},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{<b>Name</b>: "avx512bw", Feature: &amp;X86.HasAVX512BW},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{<b>Name</b>: "avx512dq", Feature: &amp;X86.HasAVX512DQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{<b>Name</b>: "avx512ifma", Feature: &amp;X86.HasAVX512IFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{<b>Name</b>: "avx512vbmi", Feature: &amp;X86.HasAVX512VBMI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{<b>Name</b>: "avx512vnniw", Feature: &amp;X86.HasAVX5124VNNIW},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{<b>Name</b>: "avx5124fmaps", Feature: &amp;X86.HasAVX5124FMAPS},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{<b>Name</b>: "avx512vpopcntdq", Feature: &amp;X86.HasAVX512VPOPCNTDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{<b>Name</b>: "avx512vpclmulqdq", Feature: &amp;X86.HasAVX512VPCLMULQDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{<b>Name</b>: "avx512vnni", Feature: &amp;X86.HasAVX512VNNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{<b>Name</b>: "avx512gfni", Feature: &amp;X86.HasAVX512GFNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{<b>Name</b>: "avx512vaes", Feature: &amp;X86.HasAVX512VAES},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{<b>Name</b>: "avx512vbmi2", Feature: &amp;X86.HasAVX512VBMI2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{<b>Name</b>: "avx512bitalg", Feature: &amp;X86.HasAVX512BITALG},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{<b>Name</b>: "avx512bf16", Feature: &amp;X86.HasAVX512BF16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{<b>Name</b>: "amxtile", Feature: &amp;X86.HasAMXTile},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{<b>Name</b>: "amxint8", Feature: &amp;X86.HasAMXInt8},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{<b>Name</b>: "amxbf16", Feature: &amp;X86.HasAMXBF16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{<b>Name</b>: "bmi1", Feature: &amp;X86.HasBMI1},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{<b>Name</b>: "bmi2", Feature: &amp;X86.HasBMI2},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{<b>Name</b>: "cx16", Feature: &amp;X86.HasCX16},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{<b>Name</b>: "erms", Feature: &amp;X86.HasERMS},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{<b>Name</b>: "fma", Feature: &amp;X86.HasFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{<b>Name</b>: "osxsave", Feature: &amp;X86.HasOSXSAVE},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{<b>Name</b>: "pclmulqdq", Feature: &amp;X86.HasPCLMULQDQ},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{<b>Name</b>: "popcnt", Feature: &amp;X86.HasPOPCNT},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{<b>Name</b>: "rdrand", Feature: &amp;X86.HasRDRAND},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{<b>Name</b>: "rdseed", Feature: &amp;X86.HasRDSEED},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{<b>Name</b>: "sse3", Feature: &amp;X86.HasSSE3},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{<b>Name</b>: "sse41", Feature: &amp;X86.HasSSE41},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{<b>Name</b>: "sse42", Feature: &amp;X86.HasSSE42},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{<b>Name</b>: "ssse3", Feature: &amp;X86.HasSSSE3},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{<b>Name</b>: "avxifma", Feature: &amp;X86.HasAVXIFMA},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{<b>Name</b>: "avxvnni", Feature: &amp;X86.HasAVXVNNI},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{<b>Name</b>: "avxvnniint8", Feature: &amp;X86.HasAVXVNNIInt8},
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{<b>Name</b>: "sse2", Feature: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">cpu.go#L268</a>: 	<b>Name</b>      string
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-316" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-316">#L316</a>: 			if options[i].<b>Name</b> == key {
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-332" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-332">#L332</a>: 			print("GODEBUG sys/cpu: can not enable \"", o.<b>Name</b>, "\", missing CPU support\n")
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-337" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-337">#L337</a>: 			print("GODEBUG sys/cpu: can not disable \"", o.<b>Name</b>, "\", required CPU feature\n")
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{<b>Name</b>: "adx", Feature: &amp;X86.HasADX},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{<b>Name</b>: "aes", Feature: &amp;X86.HasAES},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{<b>Name</b>: "avx", Feature: &amp;X86.HasAVX},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{<b>Name</b>: "avx2", Feature: &amp;X86.HasAVX2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{<b>Name</b>: "avx512", Feature: &amp;X86.HasAVX512},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{<b>Name</b>: "avx512f", Feature: &amp;X86.HasAVX512F},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{<b>Name</b>: "avx512cd", Feature: &amp;X86.HasAVX512CD},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{<b>Name</b>: "avx512er", Feature: &amp;X86.HasAVX512ER},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{<b>Name</b>: "avx512pf", Feature: &amp;X86.HasAVX512PF},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{<b>Name</b>: "avx512vl", Feature: &amp;X86.HasAVX512VL},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{<b>Name</b>: "avx512bw", Feature: &amp;X86.HasAVX512BW},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{<b>Name</b>: "avx512dq", Feature: &amp;X86.HasAVX512DQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{<b>Name</b>: "avx512ifma", Feature: &amp;X86.HasAVX512IFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{<b>Name</b>: "avx512vbmi", Feature: &amp;X86.HasAVX512VBMI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{<b>Name</b>: "avx512vnniw", Feature: &amp;X86.HasAVX5124VNNIW},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{<b>Name</b>: "avx5124fmaps", Feature: &amp;X86.HasAVX5124FMAPS},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{<b>Name</b>: "avx512vpopcntdq", Feature: &amp;X86.HasAVX512VPOPCNTDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{<b>Name</b>: "avx512vpclmulqdq", Feature: &amp;X86.HasAVX512VPCLMULQDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{<b>Name</b>: "avx512vnni", Feature: &amp;X86.HasAVX512VNNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{<b>Name</b>: "avx512gfni", Feature: &amp;X86.HasAVX512GFNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{<b>Name</b>: "avx512vaes", Feature: &amp;X86.HasAVX512VAES},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{<b>Name</b>: "avx512vbmi2", Feature: &amp;X86.HasAVX512VBMI2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{<b>Name</b>: "avx512bitalg", Feature: &amp;X86.HasAVX512BITALG},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{<b>Name</b>: "avx512bf16", Feature: &amp;X86.HasAVX512BF16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{<b>Name</b>: "amxtile", Feature: &amp;X86.HasAMXTile},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{<b>Name</b>: "amxint8", Feature: &amp;X86.HasAMXInt8},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{<b>Name</b>: "amxbf16", Feature: &amp;X86.HasAMXBF16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{<b>Name</b>: "bmi1", Feature: &amp;X86.HasBMI1},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{<b>Name</b>: "bmi2", Feature: &amp;X86.HasBMI2},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{<b>Name</b>: "cx16", Feature: &amp;X86.HasCX16},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{<b>Name</b>: "erms", Feature: &amp;X86.HasERMS},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{<b>Name</b>: "fma", Feature: &amp;X86.HasFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{<b>Name</b>: "osxsave", Feature: &amp;X86.HasOSXSAVE},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{<b>Name</b>: "pclmulqdq", Feature: &amp;X86.HasPCLMULQDQ},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{<b>Name</b>: "popcnt", Feature: &amp;X86.HasPOPCNT},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{<b>Name</b>: "rdrand", Feature: &amp;X86.HasRDRAND},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{<b>Name</b>: "rdseed", Feature: &amp;X86.HasRDSEED},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{<b>Name</b>: "sse3", Feature: &amp;X86.HasSSE3},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{<b>Name</b>: "sse41", Feature: &amp;X86.HasSSE41},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{<b>Name</b>: "sse42", Feature: &amp;X86.HasSSE42},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{<b>Name</b>: "ssse3", Feature: &amp;X86.HasSSSE3},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{<b>Name</b>: "avxifma", Feature: &amp;X86.HasAVXIFMA},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{<b>Name</b>: "avxvnni", Feature: &amp;X86.HasAVXVNNI},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{<b>Name</b>: "avxvnniint8", Feature: &amp;X86.HasAVXVNNIInt8},
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{<b>Name</b>: "sse2", Feature: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..option^a11a7.Required.html b/use/golang.org/x/sys/cpu..option^a11a7.Required.html
index 69b54ca2dd1..c5419bce79b 100644
--- a/use/golang.org/x/sys/cpu..option^a11a7.Required.html
+++ b/use/golang.org/x/sys/cpu..option^a11a7.Required.html
@@ -9,15 +9,15 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">Required</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">Required</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">4 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">cpu.go#L267</a>: 	<b>Required</b>  bool // whether feature is mandatory and can not be disabled
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305">#L305</a>: 				options[i].Enable = enable || options[i].<b>Required</b>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if !o.Enable &amp;&amp; o.<b>Required</b> {
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">cpu_x86.go#L61</a>: 		{Name: "sse2", Feature: &amp;X86.HasSSE2, <b>Required</b>: runtime.GOARCH == "amd64"},
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">cpu.go#L272</a>: 	<b>Required</b>  bool // whether feature is mandatory and can not be disabled
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310">#L310</a>: 				options[i].Enable = enable || options[i].<b>Required</b>
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		if !o.Enable &amp;&amp; o.<b>Required</b> {
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">cpu_x86.go#L61</a>: 		{Name: "sse2", Feature: &amp;X86.HasSSE2, <b>Required</b>: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/golang.org/x/sys/cpu..option^a11a7.Specified.html b/use/golang.org/x/sys/cpu..option^a11a7.Specified.html
index 93d3ae7cdf9..f4d6bae4dd8 100644
--- a/use/golang.org/x/sys/cpu..option^a11a7.Specified.html
+++ b/use/golang.org/x/sys/cpu..option^a11a7.Specified.html
@@ -9,15 +9,15 @@
 <script src="../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">Specified</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-267">option</a>.<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">Specified</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">4 uses</span>
 
-	<a href="../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">cpu.go#L265</a>: 	<b>Specified</b> bool // whether feature value was specified in GODEBUG
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-304" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-304">#L304</a>: 				options[i].<b>Specified</b> = true
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-312" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-312">#L312</a>: 				options[i].<b>Specified</b> = true
-		<a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-322" class="path-duplicate">cpu.go</a><a href="../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-322">#L322</a>: 		if !o.<b>Specified</b> {
+	golang.org/x/sys/cpu (current package)
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">cpu.go#L270</a>: 	<b>Specified</b> bool // whether feature value was specified in GODEBUG
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-309" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-309">#L309</a>: 				options[i].<b>Specified</b> = true
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-317" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-317">#L317</a>: 				options[i].<b>Specified</b> = true
+		<a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-327" class="path-duplicate">cpu.go</a><a href="../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-327">#L327</a>: 		if !o.<b>Specified</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/iter..Seq.html b/use/iter..Seq.html
index 98b7db3adf3..609c9e10dab 100644
--- a/use/iter..Seq.html
+++ b/use/iter..Seq.html
@@ -26,7 +26,7 @@
 		<a href="../src/bytes/iter.go.html#line-116" class="path-duplicate">iter.go</a><a href="../src/bytes/iter.go.html#line-116">#L116</a>: func FieldsFuncSeq(s []byte, f func(rune) bool) iter.<b>Seq</b>[[]byte] {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-1106">verify.go#L1106</a>: func (pg *policyGraph) parents() iter.<b>Seq</b>[*policyGraphNode] {
+		<a href="../src/crypto/x509/verify.go.html#line-1111">verify.go#L1111</a>: func (pg *policyGraph) parents() iter.<b>Seq</b>[*policyGraphNode] {
 
 	<a href="../pkg/maps.html">maps</a>
 		<a href="../src/maps/iter.go.html#line-25">iter.go#L25</a>: func Keys[Map ~map[K]V, K comparable, V any](m Map) iter.<b>Seq</b>[K] {
diff --git a/use/maps..Clone.html b/use/maps..Clone.html
index 092ea88ba48..6fedbf2b86c 100644
--- a/use/maps..Clone.html
+++ b/use/maps..Clone.html
@@ -17,7 +17,7 @@
 		<a href="../src/maps/maps.go.html#line-50">maps.go#L50</a>: func <b>Clone</b>[M ~map[K]V, K comparable, V any](m M) M {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-1377">verify.go#L1377</a>: 	userConstrainedPolicySet := maps.<b>Clone</b>(authorityConstrainedPolicySet)
+		<a href="../src/crypto/x509/verify.go.html#line-1382">verify.go#L1382</a>: 	userConstrainedPolicySet := maps.<b>Clone</b>(authorityConstrainedPolicySet)
 
 	<a href="../pkg/net/http.html">net/http</a>
 		<a href="../src/net/http/request.go.html#line-411">request.go#L411</a>: 	r2.otherValues = maps.<b>Clone</b>(r.otherValues)
diff --git a/use/maps..Values.html b/use/maps..Values.html
index a1872622e88..e4984ad7f9c 100644
--- a/use/maps..Values.html
+++ b/use/maps..Values.html
@@ -17,7 +17,7 @@
 		<a href="../src/maps/iter.go.html#line-38">iter.go#L38</a>: func <b>Values</b>[Map ~map[K]V, K comparable, V any](m Map) iter.Seq[V] {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-1110">verify.go#L1110</a>: 	return maps.<b>Values</b>(pg.strata[pg.depth-1])
+		<a href="../src/crypto/x509/verify.go.html#line-1115">verify.go#L1115</a>: 	return maps.<b>Values</b>(pg.strata[pg.depth-1])
 </code></pre><pre id="footer">
 <table><tr><td><img src="../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/math/big..Int.String.html b/use/math/big..Int.String.html
index 39497bbe084..2bae12ffe4f 100644
--- a/use/math/big..Int.String.html
+++ b/use/math/big..Int.String.html
@@ -21,7 +21,7 @@
 		<a href="../../src/math/big/ratconv.go.html#line-326">ratconv.go#L326</a>: 		return x.a.<b>String</b>()
 
 	<a href="../../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../../src/crypto/x509/verify.go.html#line-164">verify.go#L164</a>: 				certName = "serial:" + e.hintCert.SerialNumber.<b>String</b>()
+		<a href="../../src/crypto/x509/verify.go.html#line-166">verify.go#L166</a>: 				certName = "serial:" + e.hintCert.SerialNumber.<b>String</b>()
 
 	<a href="../../pkg/github.com/gotd/td/exchange.html">github.com/gotd/td/exchange</a>
 		<a href="../../src/github.com/gotd/td/exchange/server_flow.go.html#line-149">server_flow.go#L149</a>: 	s.log.Debug(ctx, "Sending ResPQ", log.String("pq", pq.<b>String</b>()))
diff --git a/use/net..IP.Equal.html b/use/net..IP.Equal.html
index 5bb270911b5..5752f1ba978 100644
--- a/use/net..IP.Equal.html
+++ b/use/net..IP.Equal.html
@@ -23,7 +23,7 @@
 		<a href="../src/net/tcpsock_posix.go.html#line-143">tcpsock_posix.go#L143</a>: 	return l.Port == r.Port &amp;&amp; l.IP.<b>Equal</b>(r.IP)
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-946">verify.go#L946</a>: 			if ip.<b>Equal</b>(candidate) {
+		<a href="../src/crypto/x509/verify.go.html#line-951">verify.go#L951</a>: 			if ip.<b>Equal</b>(candidate) {
 
 	<a href="../pkg/golang.org/x/net/proxy.html">golang.org/x/net/proxy</a>
 		<a href="../src/golang.org/x/net/proxy/per_host.go.html#line-69">per_host.go#L69</a>: 			if bypassIP.<b>Equal</b>(ip) {
diff --git a/use/net..IP.String.html b/use/net..IP.String.html
index 0e9d51ccf4b..896c1e76095 100644
--- a/use/net..IP.String.html
+++ b/use/net..IP.String.html
@@ -27,7 +27,7 @@
 		<a href="../src/net/http/socks_bundle.go.html#line-257">socks_bundle.go#L257</a>: 	return net.JoinHostPort(a.IP.<b>String</b>(), port)
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-130">verify.go#L130</a>: 			valid.WriteString(san.<b>String</b>())
+		<a href="../src/crypto/x509/verify.go.html#line-132">verify.go#L132</a>: 			valid.WriteString(san.<b>String</b>())
 
 	<a href="../pkg/github.com/gotd/td/session.html">github.com/gotd/td/session</a>
 		<a href="../src/github.com/gotd/td/session/telethon.go.html#line-83">telethon.go#L83</a>: 		Addr:      net.JoinHostPort(addr.<b>String</b>(), strconv.Itoa(int(port))),
diff --git a/use/net..ParseIP.html b/use/net..ParseIP.html
index be89c0eea9e..683866eb070 100644
--- a/use/net..ParseIP.html
+++ b/use/net..ParseIP.html
@@ -30,8 +30,8 @@
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/parser.go.html#line-644">parser.go#L644</a>: 				if net.<b>ParseIP</b>(domain) != nil {
-		<a href="../src/crypto/x509/verify.go.html#line-118">verify.go#L118</a>: 	if ip := net.<b>ParseIP</b>(h.Host); ip != nil {
-		<a href="../src/crypto/x509/verify.go.html#line-942" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-942">#L942</a>: 	if ip := net.<b>ParseIP</b>(candidateIP); ip != nil {
+		<a href="../src/crypto/x509/verify.go.html#line-120">verify.go#L120</a>: 	if ip := net.<b>ParseIP</b>(h.Host); ip != nil {
+		<a href="../src/crypto/x509/verify.go.html#line-947" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-947">#L947</a>: 	if ip := net.<b>ParseIP</b>(candidateIP); ip != nil {
 
 	<a href="../pkg/github.com/gotd/neo.html">github.com/gotd/neo</a>
 		<a href="../src/github.com/gotd/neo/net.go.html#line-179">net.go#L179</a>: 	if a.IP = net.<b>ParseIP</b>(host); a.IP == nil {
diff --git a/use/runtime..GOOS.html b/use/runtime..GOOS.html
index a6e87ed65e9..0f15335e7bb 100644
--- a/use/runtime..GOOS.html
+++ b/use/runtime..GOOS.html
@@ -78,7 +78,7 @@
 		<a href="../src/crypto/tls/common.go.html#line-1884">common.go#L1884</a>: 		if runtime.<b>GOOS</b> == "windows" || runtime.<b>GOOS</b> == "darwin" || runtime.<b>GOOS</b> == "ios" {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-559">verify.go#L559</a>: 	if runtime.<b>GOOS</b> == "windows" || runtime.<b>GOOS</b> == "darwin" || runtime.<b>GOOS</b> == "ios" {
+		<a href="../src/crypto/x509/verify.go.html#line-561">verify.go#L561</a>: 	if runtime.<b>GOOS</b> == "windows" || runtime.<b>GOOS</b> == "darwin" || runtime.<b>GOOS</b> == "ios" {
 
 	<a href="../pkg/github.com/gotd/td/telegram/internal/manager.html">github.com/gotd/td/telegram/internal/manager</a>
 		<a href="../src/github.com/gotd/td/telegram/internal/manager/device.go.html#line-48">device.go#L48</a>: 		set(&amp;c.SystemVersion, runtime.<b>GOOS</b>)
diff --git a/use/slices..DeleteFunc.html b/use/slices..DeleteFunc.html
index dc200b045c0..0f56e86e431 100644
--- a/use/slices..DeleteFunc.html
+++ b/use/slices..DeleteFunc.html
@@ -31,7 +31,7 @@
 		<a href="../src/crypto/tls/handshake_server_tls13.go.html#line-210">handshake_server_tls13.go#L210</a>: 	preferredGroups = slices.<b>DeleteFunc</b>(preferredGroups, func(group CurveID) bool {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-622">verify.go#L622</a>: 	candidateChains = slices.<b>DeleteFunc</b>(candidateChains, func(chain []*Certificate) bool {
+		<a href="../src/crypto/x509/verify.go.html#line-624">verify.go#L624</a>: 	candidateChains = slices.<b>DeleteFunc</b>(candidateChains, func(chain []*Certificate) bool {
 
 	<a href="../pkg/github.com/refraction-networking/utls.html">github.com/refraction-networking/utls</a>
 		<a href="../src/github.com/refraction-networking/utls/common.go.html#line-1267">common.go#L1267</a>: 		curvePreferences = slices.<b>DeleteFunc</b>(curvePreferences, func(x CurveID) bool {
diff --git a/use/strings..Builder.Len.html b/use/strings..Builder.Len.html
index 2468ae21234..c33d5257a51 100644
--- a/use/strings..Builder.Len.html
+++ b/use/strings..Builder.Len.html
@@ -19,8 +19,8 @@
 		<a href="../src/strings/strings.go.html#line-680" class="path-duplicate">strings.go</a><a href="../src/strings/strings.go.html#line-680">#L680</a>: 		chunk := min(n-b.<b>Len</b>(), b.<b>Len</b>(), chunkMax)
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-127">verify.go#L127</a>: 			if valid.<b>Len</b>() &gt; 0 {
-		<a href="../src/crypto/x509/verify.go.html#line-139" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-139">#L139</a>: 	if valid.<b>Len</b>() == 0 {
+		<a href="../src/crypto/x509/verify.go.html#line-129">verify.go#L129</a>: 			if valid.<b>Len</b>() &gt; 0 {
+		<a href="../src/crypto/x509/verify.go.html#line-141" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-141">#L141</a>: 	if valid.<b>Len</b>() == 0 {
 
 	<a href="../pkg/net/url.html">net/url</a>
 		<a href="../src/net/url/url.go.html#line-843">url.go#L843</a>: 		if buf.<b>Len</b>() == 0 {
diff --git a/use/strings..Builder.String.html b/use/strings..Builder.String.html
index 03586a3f363..68891eebb63 100644
--- a/use/strings..Builder.String.html
+++ b/use/strings..Builder.String.html
@@ -30,7 +30,7 @@
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/oid.go.html#line-355">oid.go#L355</a>: 	return b.<b>String</b>()
-		<a href="../src/crypto/x509/verify.go.html#line-142">verify.go#L142</a>: 	return "x509: certificate is valid for " + valid.<b>String</b>() + ", not " + h.Host
+		<a href="../src/crypto/x509/verify.go.html#line-144">verify.go#L144</a>: 	return "x509: certificate is valid for " + valid.<b>String</b>() + ", not " + h.Host
 
 	<a href="../pkg/encoding/asn1.html">encoding/asn1</a>
 		<a href="../src/encoding/asn1/asn1.go.html#line-245">asn1.go#L245</a>: 	return s.<b>String</b>()
diff --git a/use/strings..Builder.WriteString.html b/use/strings..Builder.WriteString.html
index efe65bc01b0..1d9790d5bbe 100644
--- a/use/strings..Builder.WriteString.html
+++ b/use/strings..Builder.WriteString.html
@@ -41,9 +41,9 @@
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/oid.go.html#line-324">oid.go#L324</a>: 					b.<b>WriteString</b>("2.")
 		<a href="../src/crypto/x509/oid.go.html#line-345" class="path-duplicate">oid.go</a><a href="../src/crypto/x509/oid.go.html#line-345">#L345</a>: 					b.<b>WriteString</b>("2.")
-		<a href="../src/crypto/x509/verify.go.html#line-128">verify.go#L128</a>: 				valid.<b>WriteString</b>(", ")
-		<a href="../src/crypto/x509/verify.go.html#line-130" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-130">#L130</a>: 			valid.<b>WriteString</b>(san.String())
-		<a href="../src/crypto/x509/verify.go.html#line-136" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-136">#L136</a>: 		valid.<b>WriteString</b>(strings.Join(c.DNSNames, ", "))
+		<a href="../src/crypto/x509/verify.go.html#line-130">verify.go#L130</a>: 				valid.<b>WriteString</b>(", ")
+		<a href="../src/crypto/x509/verify.go.html#line-132" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-132">#L132</a>: 			valid.<b>WriteString</b>(san.String())
+		<a href="../src/crypto/x509/verify.go.html#line-138" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-138">#L138</a>: 		valid.<b>WriteString</b>(strings.Join(c.DNSNames, ", "))
 
 	<a href="../pkg/github.com/gotd/td/tdp.html">github.com/gotd/td/tdp</a>
 		<a href="../src/github.com/gotd/td/tdp/tdp.go.html#line-43">tdp.go#L43</a>: 			b.<b>WriteString</b>(base64.RawURLEncoding.EncodeToString(buf))
diff --git a/use/strings..Builder.html b/use/strings..Builder.html
index b6d9e78ef24..1e554938dc3 100644
--- a/use/strings..Builder.html
+++ b/use/strings..Builder.html
@@ -42,7 +42,7 @@
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/oid.go.html#line-291">oid.go#L291</a>: 	var b strings.<b>Builder</b>
-		<a href="../src/crypto/x509/verify.go.html#line-117">verify.go#L117</a>: 	var valid strings.<b>Builder</b>
+		<a href="../src/crypto/x509/verify.go.html#line-119">verify.go#L119</a>: 	var valid strings.<b>Builder</b>
 
 	<a href="../pkg/encoding/asn1.html">encoding/asn1</a>
 		<a href="../src/encoding/asn1/asn1.go.html#line-234">asn1.go#L234</a>: 	var s strings.<b>Builder</b>
diff --git a/use/strings..Count.html b/use/strings..Count.html
index 7a839d8614f..4157a2ff89e 100644
--- a/use/strings..Count.html
+++ b/use/strings..Count.html
@@ -20,7 +20,7 @@
 		<a href="../src/strings/strings.go.html#line-1144" class="path-duplicate">strings.go</a><a href="../src/strings/strings.go.html#line-1144">#L1144</a>: 	if m := <b>Count</b>(s, old); m == 0 {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-403">verify.go#L403</a>: 	reverseLabels = make([]string, 0, strings.<b>Count</b>(domain, ".")+1)
+		<a href="../src/crypto/x509/verify.go.html#line-405">verify.go#L405</a>: 	reverseLabels = make([]string, 0, strings.<b>Count</b>(domain, ".")+1)
 
 	<a href="../pkg/mime.html">mime</a>
 		<a href="../src/mime/encodedword.go.html#line-201">encodedword.go#L201</a>: 	if len(word) &lt; 8 || !strings.HasPrefix(word, "=?") || !strings.HasSuffix(word, "?=") || strings.<b>Count</b>(word, "?") != 4 {
diff --git a/use/strings..Join.html b/use/strings..Join.html
index c7a749d9809..21d52930378 100644
--- a/use/strings..Join.html
+++ b/use/strings..Join.html
@@ -20,8 +20,8 @@
 		<a href="../src/crypto/tls/common.go.html#line-1343">common.go#L1343</a>: 			wildcardName := strings.<b>Join</b>(labels, ".")
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-136">verify.go#L136</a>: 		valid.WriteString(strings.<b>Join</b>(c.DNSNames, ", "))
-		<a href="../src/crypto/x509/verify.go.html#line-656" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-656">#L656</a>: 		err = CertificateInvalidError{c, NoValidChains, strings.<b>Join</b>(details, ", ")}
+		<a href="../src/crypto/x509/verify.go.html#line-138">verify.go#L138</a>: 		valid.WriteString(strings.<b>Join</b>(c.DNSNames, ", "))
+		<a href="../src/crypto/x509/verify.go.html#line-661" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-661">#L661</a>: 		err = CertificateInvalidError{c, NoValidChains, strings.<b>Join</b>(details, ", ")}
 
 	<a href="../pkg/encoding/json.html">encoding/json</a>
 		<a href="../src/encoding/json/decode.go.html#line-264">decode.go#L264</a>: 			err.Field = strings.<b>Join</b>(fieldStack, ".")
diff --git a/use/strings..LastIndexByte.html b/use/strings..LastIndexByte.html
index cd28f7f9f67..74bcbd52482 100644
--- a/use/strings..LastIndexByte.html
+++ b/use/strings..LastIndexByte.html
@@ -17,7 +17,7 @@
 		<a href="../src/strings/strings.go.html#line-285">strings.go#L285</a>: func <b>LastIndexByte</b>(s string, c byte) int {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-405">verify.go#L405</a>: 		if i := strings.<b>LastIndexByte</b>(domain, '.'); i == -1 {
+		<a href="../src/crypto/x509/verify.go.html#line-407">verify.go#L407</a>: 		if i := strings.<b>LastIndexByte</b>(domain, '.'); i == -1 {
 
 	<a href="../pkg/net/url.html">net/url</a>
 		<a href="../src/net/url/url.go.html#line-1192">url.go#L1192</a>: 	colon := strings.<b>LastIndexByte</b>(host, ':')
diff --git a/use/strings..Split.html b/use/strings..Split.html
index 522aed2f134..0846326d3f5 100644
--- a/use/strings..Split.html
+++ b/use/strings..Split.html
@@ -22,9 +22,9 @@
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
 		<a href="../src/crypto/x509/root_unix.go.html#line-58">root_unix.go#L58</a>: 		dirs = strings.<b>Split</b>(d, ":")
-		<a href="../src/crypto/x509/verify.go.html#line-827">verify.go#L827</a>: 	for i, part := range strings.<b>Split</b>(host, ".") {
-		<a href="../src/crypto/x509/verify.go.html#line-877" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-877">#L877</a>: 	patternParts := strings.<b>Split</b>(pattern, ".")
-		<a href="../src/crypto/x509/verify.go.html#line-978" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-978">#L978</a>: 	return strings.<b>Split</b>(toLowerCaseASCII(strings.TrimSuffix(host, ".")), ".")
+		<a href="../src/crypto/x509/verify.go.html#line-832">verify.go#L832</a>: 	for i, part := range strings.<b>Split</b>(host, ".") {
+		<a href="../src/crypto/x509/verify.go.html#line-882" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-882">#L882</a>: 	patternParts := strings.<b>Split</b>(pattern, ".")
+		<a href="../src/crypto/x509/verify.go.html#line-983" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-983">#L983</a>: 	return strings.<b>Split</b>(toLowerCaseASCII(strings.TrimSuffix(host, ".")), ".")
 
 	<a href="../pkg/github.com/coder/websocket.html">github.com/coder/websocket</a>
 		<a href="../src/github.com/coder/websocket/accept.go.html#line-342">accept.go#L342</a>: 		vals := strings.<b>Split</b>(extStr, ";")
diff --git a/use/strings..TrimSuffix.html b/use/strings..TrimSuffix.html
index c66789b0f6b..bb7a10cdf48 100644
--- a/use/strings..TrimSuffix.html
+++ b/use/strings..TrimSuffix.html
@@ -17,8 +17,8 @@
 		<a href="../src/strings/strings.go.html#line-1128">strings.go#L1128</a>: func <b>TrimSuffix</b>(s, suffix string) string {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-816">verify.go#L816</a>: 		host = strings.<b>TrimSuffix</b>(host, ".")
-		<a href="../src/crypto/x509/verify.go.html#line-978" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-978">#L978</a>: 	return strings.Split(toLowerCaseASCII(strings.<b>TrimSuffix</b>(host, ".")), ".")
+		<a href="../src/crypto/x509/verify.go.html#line-821">verify.go#L821</a>: 		host = strings.<b>TrimSuffix</b>(host, ".")
+		<a href="../src/crypto/x509/verify.go.html#line-983" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-983">#L983</a>: 	return strings.Split(toLowerCaseASCII(strings.<b>TrimSuffix</b>(host, ".")), ".")
 
 	<a href="../pkg/golang.org/x/net/proxy.html">golang.org/x/net/proxy</a>
 		<a href="../src/golang.org/x/net/proxy/per_host.go.html#line-142">per_host.go#L142</a>: 	zone = strings.<b>TrimSuffix</b>(zone, ".")
diff --git a/use/time..Now.html b/use/time..Now.html
index 811957d8f0f..4adfcb2e939 100644
--- a/use/time..Now.html
+++ b/use/time..Now.html
@@ -32,7 +32,7 @@
 		<a href="../src/crypto/tls/conn.go.html#line-1481" class="path-duplicate">conn.go</a><a href="../src/crypto/tls/conn.go.html#line-1481">#L1481</a>: 		c.SetWriteDeadline(time.<b>Now</b>())
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-457">verify.go#L457</a>: 		now = time.<b>Now</b>()
+		<a href="../src/crypto/x509/verify.go.html#line-459">verify.go#L459</a>: 		now = time.<b>Now</b>()
 
 	<a href="../pkg/github.com/andybalholm/brotli/flate.html">github.com/andybalholm/brotli/flate</a>
 		<a href="../src/github.com/andybalholm/brotli/flate/gzip.go.html#line-46">gzip.go#L46</a>: 		dst = appendUint32(dst, uint32(time.<b>Now</b>().Unix()))
diff --git a/use/time..RFC3339.html b/use/time..RFC3339.html
index d5d17a531dd..6b05a4908a2 100644
--- a/use/time..RFC3339.html
+++ b/use/time..RFC3339.html
@@ -26,8 +26,8 @@
 		<a href="../src/time/format_rfc3339.go.html#line-184" class="path-duplicate">format_rfc3339.go</a><a href="../src/time/format_rfc3339.go.html#line-184">#L184</a>: 			return Time{}, &amp;ParseError{<b>RFC3339</b>, string(b), <b>RFC3339</b>, string(b), ""}
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-463">verify.go#L463</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.Format(time.<b>RFC3339</b>), c.NotBefore.Format(time.<b>RFC3339</b>)),
-		<a href="../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.Format(time.<b>RFC3339</b>), c.NotAfter.Format(time.<b>RFC3339</b>)),
+		<a href="../src/crypto/x509/verify.go.html#line-465">verify.go#L465</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.Format(time.<b>RFC3339</b>), c.NotBefore.Format(time.<b>RFC3339</b>)),
+		<a href="../src/crypto/x509/verify.go.html#line-471" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-471">#L471</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.Format(time.<b>RFC3339</b>), c.NotAfter.Format(time.<b>RFC3339</b>)),
 
 	<a href="../pkg/github.com/gotd/td/proto.html">github.com/gotd/td/proto</a>
 		<a href="../src/github.com/gotd/td/proto/message_id.go.html#line-44">message_id.go#L44</a>: 		int64(id), id.Type(), id.Time().Format(time.<b>RFC3339</b>),
diff --git a/use/time..Time.After.html b/use/time..Time.After.html
index 5b66076e669..6169801c465 100644
--- a/use/time..Time.After.html
+++ b/use/time..Time.After.html
@@ -27,7 +27,7 @@
 		<a href="../src/crypto/tls/handshake_server_tls13.go.html#line-370">handshake_server_tls13.go#L370</a>: 		if sessionHasClientCerts &amp;&amp; c.config.time().<b>After</b>(sessionState.peerCertificates[0].NotAfter) {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-465">verify.go#L465</a>: 	} else if now.<b>After</b>(c.NotAfter) {
+		<a href="../src/crypto/x509/verify.go.html#line-467">verify.go#L467</a>: 	} else if now.<b>After</b>(c.NotAfter) {
 
 	<a href="../pkg/github.com/gotd/neo.html">github.com/gotd/neo</a>
 		<a href="../src/github.com/gotd/neo/time.go.html#line-122">time.go#L122</a>: 		if m.when.<b>After</b>(t.now) {
diff --git a/use/time..Time.Before.html b/use/time..Time.Before.html
index 3d4e606e9fc..ce6faa9edbe 100644
--- a/use/time..Time.Before.html
+++ b/use/time..Time.Before.html
@@ -24,7 +24,7 @@
 		<a href="../src/crypto/tls/common.go.html#line-1873">common.go#L1873</a>: 			return opts.CurrentTime.<b>Before</b>(cert.NotBefore) || opts.CurrentTime.After(cert.NotAfter)
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-459">verify.go#L459</a>: 	if now.<b>Before</b>(c.NotBefore) {
+		<a href="../src/crypto/x509/verify.go.html#line-461">verify.go#L461</a>: 	if now.<b>Before</b>(c.NotBefore) {
 		<a href="../src/crypto/x509/x509.go.html#line-2430">x509.go#L2430</a>: 	if template.NextUpdate.<b>Before</b>(template.ThisUpdate) {
 
 	<a href="../pkg/crypto/x509/pkix.html">crypto/x509/pkix</a>
diff --git a/use/time..Time.Format.html b/use/time..Time.Format.html
index 912c8213cfd..12c70f7b7a8 100644
--- a/use/time..Time.Format.html
+++ b/use/time..Time.Format.html
@@ -18,8 +18,8 @@
 		<a href="../src/time/format.go.html#line-639" class="path-duplicate">format.go</a><a href="../src/time/format.go.html#line-639">#L639</a>: func (t Time) <b>Format</b>(layout string) string {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-463">verify.go#L463</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.<b>Format</b>(time.RFC3339), c.NotBefore.<b>Format</b>(time.RFC3339)),
-		<a href="../src/crypto/x509/verify.go.html#line-469" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-469">#L469</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.<b>Format</b>(time.RFC3339), c.NotAfter.<b>Format</b>(time.RFC3339)),
+		<a href="../src/crypto/x509/verify.go.html#line-465">verify.go#L465</a>: 			Detail: fmt.Sprintf("current time %s is before %s", now.<b>Format</b>(time.RFC3339), c.NotBefore.<b>Format</b>(time.RFC3339)),
+		<a href="../src/crypto/x509/verify.go.html#line-471" class="path-duplicate">verify.go</a><a href="../src/crypto/x509/verify.go.html#line-471">#L471</a>: 			Detail: fmt.Sprintf("current time %s is after %s", now.<b>Format</b>(time.RFC3339), c.NotAfter.<b>Format</b>(time.RFC3339)),
 
 	<a href="../pkg/encoding/asn1.html">encoding/asn1</a>
 		<a href="../src/encoding/asn1/asn1.go.html#line-349">asn1.go#L349</a>: 	if serialized := ret.<b>Format</b>(formatStr); serialized != s {
diff --git a/use/time..Time.IsZero.html b/use/time..Time.IsZero.html
index 6f570c85c0c..13f6dc3e8f2 100644
--- a/use/time..Time.IsZero.html
+++ b/use/time..Time.IsZero.html
@@ -20,7 +20,7 @@
 		<a href="../src/crypto/tls/tls.go.html#line-140">tls.go#L140</a>: 	if !netDialer.Deadline.<b>IsZero</b>() {
 
 	<a href="../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../src/crypto/x509/verify.go.html#line-456">verify.go#L456</a>: 	if now.<b>IsZero</b>() {
+		<a href="../src/crypto/x509/verify.go.html#line-458">verify.go#L458</a>: 	if now.<b>IsZero</b>() {
 		<a href="../src/crypto/x509/x509.go.html#line-2460">x509.go#L2460</a>: 			if rce.RevocationTime.<b>IsZero</b>() {
 
 	<a href="../pkg/github.com/coder/websocket.html">github.com/coder/websocket</a>
diff --git a/use/time..Time.html b/use/time..Time.html
index 3d6688e9f7c..0f5d985cfc1 100644
--- a/use/time..Time.html
+++ b/use/time..Time.html
@@ -149,7 +149,7 @@
 		<a href="../src/crypto/x509/parser.go.html#line-218" class="path-duplicate">parser.go</a><a href="../src/crypto/x509/parser.go.html#line-218">#L218</a>: func parseValidity(der cryptobyte.String) (time.<b>Time</b>, time.<b>Time</b>, error) {
 		<a href="../src/crypto/x509/parser.go.html#line-221" class="path-duplicate">parser.go</a><a href="../src/crypto/x509/parser.go.html#line-221">#L221</a>: 		return time.<b>Time</b>{}, time.<b>Time</b>{}, err
 		<a href="../src/crypto/x509/parser.go.html#line-225" class="path-duplicate">parser.go</a><a href="../src/crypto/x509/parser.go.html#line-225">#L225</a>: 		return time.<b>Time</b>{}, time.<b>Time</b>{}, err
-		<a href="../src/crypto/x509/verify.go.html#line-207">verify.go#L207</a>: 	CurrentTime time.<b>Time</b>
+		<a href="../src/crypto/x509/verify.go.html#line-209">verify.go#L209</a>: 	CurrentTime time.<b>Time</b>
 		<a href="../src/crypto/x509/x509.go.html#line-199">x509.go#L199</a>: 	NotBefore, NotAfter time.<b>Time</b>
 		<a href="../src/crypto/x509/x509.go.html#line-721" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-721">#L721</a>: 	NotBefore, NotAfter time.<b>Time</b> // Validity bounds.
 		<a href="../src/crypto/x509/x509.go.html#line-1855" class="path-duplicate">x509.go</a><a href="../src/crypto/x509/x509.go.html#line-1855">#L1855</a>: func (c *Certificate) CreateCRL(rand io.Reader, priv any, revokedCerts []pkix.RevokedCertificate, now, expiry time.<b>Time</b>) (crlBytes []byte, err error) {
diff --git a/use/unicode/utf8..RuneError.html b/use/unicode/utf8..RuneError.html
index 8d6914b78c4..452c8d7bb27 100644
--- a/use/unicode/utf8..RuneError.html
+++ b/use/unicode/utf8..RuneError.html
@@ -49,7 +49,7 @@
 		<a href="../../src/bytes/bytes.go.html#line-354" class="path-duplicate">bytes.go</a><a href="../../src/bytes/bytes.go.html#line-354">#L354</a>: 		if r != utf8.<b>RuneError</b> {
 
 	<a href="../../pkg/crypto/x509.html">crypto/x509</a>
-		<a href="../../src/crypto/x509/verify.go.html#line-902">verify.go#L902</a>: 		if c == utf8.<b>RuneError</b> {
+		<a href="../../src/crypto/x509/verify.go.html#line-907">verify.go#L907</a>: 		if c == utf8.<b>RuneError</b> {
 
 	<a href="../../pkg/encoding/json.html">encoding/json</a>
 		<a href="../../src/encoding/json/decode.go.html#line-1209">decode.go#L1209</a>: 		if rr == utf8.<b>RuneError</b> &amp;&amp; size == 1 {
diff --git a/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html b/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
index 84b115cb151..0c5834ee67d 100644
--- a/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
+++ b/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint32.html
@@ -9,14 +9,14 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">Uint32</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-13">byteorder.go#L13</a>: 	<b>Uint32</b>([]byte) uint32
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-55">hwcap_linux.go#L55</a>: 			tag = uint(bo.<b>Uint32</b>(buf[0:]))
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56" class="path-duplicate">hwcap_linux.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56">#L56</a>: 			val = uint(bo.<b>Uint32</b>(buf[4:]))
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-13">byteorder.go#L13</a>: 	<b>Uint32</b>([]byte) uint32
+		<a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-55">hwcap_linux.go#L55</a>: 			tag = uint(bo.<b>Uint32</b>(buf[0:]))
+		<a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56" class="path-duplicate">hwcap_linux.go</a><a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-56">#L56</a>: 			val = uint(bo.<b>Uint32</b>(buf[4:]))
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html b/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
index 30b252bbae7..b751cc12971 100644
--- a/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
+++ b/use/vendor/golang.org/x/sys/cpu..byteOrder^5f5cc.Uint64.html
@@ -9,14 +9,14 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></span><span style="font-size: large;"><i> (method)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-12">byteOrder</a>.<a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">Uint64</a></b></span><span style="font-size: large;"><i> (method)</i></span>
 
 <span class="title">3 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/byteorder.go.html#line-14">byteorder.go#L14</a>: 	<b>Uint64</b>([]byte) uint64
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-59">hwcap_linux.go#L59</a>: 			tag = uint(bo.<b>Uint64</b>(buf[0:]))
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60" class="path-duplicate">hwcap_linux.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60">#L60</a>: 			val = uint(bo.<b>Uint64</b>(buf[8:]))
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/byteorder.go.html#line-14">byteorder.go#L14</a>: 	<b>Uint64</b>([]byte) uint64
+		<a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-59">hwcap_linux.go#L59</a>: 			tag = uint(bo.<b>Uint64</b>(buf[0:]))
+		<a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60" class="path-duplicate">hwcap_linux.go</a><a href="../../../../../src/golang.org/x/sys/cpu/hwcap_linux.go.html#line-60">#L60</a>: 			val = uint(bo.<b>Uint64</b>(buf[8:]))
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Enable.html b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Enable.html
index 9984af87f4e..34f9274dcaa 100644
--- a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Enable.html
+++ b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Enable.html
@@ -9,17 +9,17 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">Enable</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">Enable</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">6 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-266">cpu.go#L266</a>: 	<b>Enable</b>    bool // whether feature should be enabled
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305">#L305</a>: 				options[i].<b>Enable</b> = enable || options[i].Required
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-313" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-313">#L313</a>: 				options[i].<b>Enable</b> = enable
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326">#L326</a>: 		if o.<b>Enable</b> &amp;&amp; !*o.Feature {
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if !o.<b>Enable</b> &amp;&amp; o.Required {
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		*o.Feature = o.<b>Enable</b>
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-271">cpu.go#L271</a>: 	<b>Enable</b>    bool // whether feature should be enabled
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310">#L310</a>: 				options[i].<b>Enable</b> = enable || options[i].Required
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-318" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-318">#L318</a>: 				options[i].<b>Enable</b> = enable
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if o.<b>Enable</b> &amp;&amp; !*o.Feature {
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		if !o.<b>Enable</b> &amp;&amp; o.Required {
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341">#L341</a>: 		*o.Feature = o.<b>Enable</b>
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Feature.html b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Feature.html
index 429a5b1ad66..8f2100d42ce 100644
--- a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Feature.html
+++ b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Feature.html
@@ -9,59 +9,59 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">Feature</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">Feature</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">48 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-264">cpu.go#L264</a>: 	<b>Feature</b>   *bool
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-326">#L326</a>: 		if o.Enable &amp;&amp; !*o.<b>Feature</b> {
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		*o.<b>Feature</b> = o.Enable
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{Name: "adx", <b>Feature</b>: &amp;X86.HasADX},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{Name: "aes", <b>Feature</b>: &amp;X86.HasAES},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{Name: "avx", <b>Feature</b>: &amp;X86.HasAVX},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{Name: "avx2", <b>Feature</b>: &amp;X86.HasAVX2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{Name: "avx512", <b>Feature</b>: &amp;X86.HasAVX512},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{Name: "avx512f", <b>Feature</b>: &amp;X86.HasAVX512F},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{Name: "avx512cd", <b>Feature</b>: &amp;X86.HasAVX512CD},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{Name: "avx512er", <b>Feature</b>: &amp;X86.HasAVX512ER},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{Name: "avx512pf", <b>Feature</b>: &amp;X86.HasAVX512PF},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{Name: "avx512vl", <b>Feature</b>: &amp;X86.HasAVX512VL},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{Name: "avx512bw", <b>Feature</b>: &amp;X86.HasAVX512BW},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{Name: "avx512dq", <b>Feature</b>: &amp;X86.HasAVX512DQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{Name: "avx512ifma", <b>Feature</b>: &amp;X86.HasAVX512IFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{Name: "avx512vbmi", <b>Feature</b>: &amp;X86.HasAVX512VBMI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{Name: "avx512vnniw", <b>Feature</b>: &amp;X86.HasAVX5124VNNIW},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{Name: "avx5124fmaps", <b>Feature</b>: &amp;X86.HasAVX5124FMAPS},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{Name: "avx512vpopcntdq", <b>Feature</b>: &amp;X86.HasAVX512VPOPCNTDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{Name: "avx512vpclmulqdq", <b>Feature</b>: &amp;X86.HasAVX512VPCLMULQDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{Name: "avx512vnni", <b>Feature</b>: &amp;X86.HasAVX512VNNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{Name: "avx512gfni", <b>Feature</b>: &amp;X86.HasAVX512GFNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{Name: "avx512vaes", <b>Feature</b>: &amp;X86.HasAVX512VAES},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{Name: "avx512vbmi2", <b>Feature</b>: &amp;X86.HasAVX512VBMI2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{Name: "avx512bitalg", <b>Feature</b>: &amp;X86.HasAVX512BITALG},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{Name: "avx512bf16", <b>Feature</b>: &amp;X86.HasAVX512BF16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{Name: "amxtile", <b>Feature</b>: &amp;X86.HasAMXTile},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{Name: "amxint8", <b>Feature</b>: &amp;X86.HasAMXInt8},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{Name: "amxbf16", <b>Feature</b>: &amp;X86.HasAMXBF16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{Name: "bmi1", <b>Feature</b>: &amp;X86.HasBMI1},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{Name: "bmi2", <b>Feature</b>: &amp;X86.HasBMI2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{Name: "cx16", <b>Feature</b>: &amp;X86.HasCX16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{Name: "erms", <b>Feature</b>: &amp;X86.HasERMS},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{Name: "fma", <b>Feature</b>: &amp;X86.HasFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{Name: "osxsave", <b>Feature</b>: &amp;X86.HasOSXSAVE},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{Name: "pclmulqdq", <b>Feature</b>: &amp;X86.HasPCLMULQDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{Name: "popcnt", <b>Feature</b>: &amp;X86.HasPOPCNT},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{Name: "rdrand", <b>Feature</b>: &amp;X86.HasRDRAND},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{Name: "rdseed", <b>Feature</b>: &amp;X86.HasRDSEED},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{Name: "sse3", <b>Feature</b>: &amp;X86.HasSSE3},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{Name: "sse41", <b>Feature</b>: &amp;X86.HasSSE41},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{Name: "sse42", <b>Feature</b>: &amp;X86.HasSSE42},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{Name: "ssse3", <b>Feature</b>: &amp;X86.HasSSSE3},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{Name: "avxifma", <b>Feature</b>: &amp;X86.HasAVXIFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{Name: "avxvnni", <b>Feature</b>: &amp;X86.HasAVXVNNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{Name: "avxvnniint8", <b>Feature</b>: &amp;X86.HasAVXVNNIInt8},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{Name: "sse2", <b>Feature</b>: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-269">cpu.go#L269</a>: 	<b>Feature</b>   *bool
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if o.Enable &amp;&amp; !*o.<b>Feature</b> {
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-341">#L341</a>: 		*o.<b>Feature</b> = o.Enable
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{Name: "adx", <b>Feature</b>: &amp;X86.HasADX},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{Name: "aes", <b>Feature</b>: &amp;X86.HasAES},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{Name: "avx", <b>Feature</b>: &amp;X86.HasAVX},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{Name: "avx2", <b>Feature</b>: &amp;X86.HasAVX2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{Name: "avx512", <b>Feature</b>: &amp;X86.HasAVX512},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{Name: "avx512f", <b>Feature</b>: &amp;X86.HasAVX512F},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{Name: "avx512cd", <b>Feature</b>: &amp;X86.HasAVX512CD},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{Name: "avx512er", <b>Feature</b>: &amp;X86.HasAVX512ER},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{Name: "avx512pf", <b>Feature</b>: &amp;X86.HasAVX512PF},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{Name: "avx512vl", <b>Feature</b>: &amp;X86.HasAVX512VL},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{Name: "avx512bw", <b>Feature</b>: &amp;X86.HasAVX512BW},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{Name: "avx512dq", <b>Feature</b>: &amp;X86.HasAVX512DQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{Name: "avx512ifma", <b>Feature</b>: &amp;X86.HasAVX512IFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{Name: "avx512vbmi", <b>Feature</b>: &amp;X86.HasAVX512VBMI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{Name: "avx512vnniw", <b>Feature</b>: &amp;X86.HasAVX5124VNNIW},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{Name: "avx5124fmaps", <b>Feature</b>: &amp;X86.HasAVX5124FMAPS},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{Name: "avx512vpopcntdq", <b>Feature</b>: &amp;X86.HasAVX512VPOPCNTDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{Name: "avx512vpclmulqdq", <b>Feature</b>: &amp;X86.HasAVX512VPCLMULQDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{Name: "avx512vnni", <b>Feature</b>: &amp;X86.HasAVX512VNNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{Name: "avx512gfni", <b>Feature</b>: &amp;X86.HasAVX512GFNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{Name: "avx512vaes", <b>Feature</b>: &amp;X86.HasAVX512VAES},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{Name: "avx512vbmi2", <b>Feature</b>: &amp;X86.HasAVX512VBMI2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{Name: "avx512bitalg", <b>Feature</b>: &amp;X86.HasAVX512BITALG},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{Name: "avx512bf16", <b>Feature</b>: &amp;X86.HasAVX512BF16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{Name: "amxtile", <b>Feature</b>: &amp;X86.HasAMXTile},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{Name: "amxint8", <b>Feature</b>: &amp;X86.HasAMXInt8},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{Name: "amxbf16", <b>Feature</b>: &amp;X86.HasAMXBF16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{Name: "bmi1", <b>Feature</b>: &amp;X86.HasBMI1},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{Name: "bmi2", <b>Feature</b>: &amp;X86.HasBMI2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{Name: "cx16", <b>Feature</b>: &amp;X86.HasCX16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{Name: "erms", <b>Feature</b>: &amp;X86.HasERMS},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{Name: "fma", <b>Feature</b>: &amp;X86.HasFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{Name: "osxsave", <b>Feature</b>: &amp;X86.HasOSXSAVE},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{Name: "pclmulqdq", <b>Feature</b>: &amp;X86.HasPCLMULQDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{Name: "popcnt", <b>Feature</b>: &amp;X86.HasPOPCNT},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{Name: "rdrand", <b>Feature</b>: &amp;X86.HasRDRAND},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{Name: "rdseed", <b>Feature</b>: &amp;X86.HasRDSEED},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{Name: "sse3", <b>Feature</b>: &amp;X86.HasSSE3},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{Name: "sse41", <b>Feature</b>: &amp;X86.HasSSE41},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{Name: "sse42", <b>Feature</b>: &amp;X86.HasSSE42},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{Name: "ssse3", <b>Feature</b>: &amp;X86.HasSSSE3},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{Name: "avxifma", <b>Feature</b>: &amp;X86.HasAVXIFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{Name: "avxvnni", <b>Feature</b>: &amp;X86.HasAVXVNNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{Name: "avxvnniint8", <b>Feature</b>: &amp;X86.HasAVXVNNIInt8},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{Name: "sse2", <b>Feature</b>: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Name.html b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Name.html
index 38071b23a0b..ad6b1dd6b62 100644
--- a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Name.html
+++ b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Name.html
@@ -9,60 +9,60 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">Name</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">Name</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">49 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-263">cpu.go#L263</a>: 	<b>Name</b>      string
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-311" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-311">#L311</a>: 			if options[i].<b>Name</b> == key {
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-327" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-327">#L327</a>: 			print("GODEBUG sys/cpu: can not enable \"", o.<b>Name</b>, "\", missing CPU support\n")
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-332" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-332">#L332</a>: 			print("GODEBUG sys/cpu: can not disable \"", o.<b>Name</b>, "\", required CPU feature\n")
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{<b>Name</b>: "adx", Feature: &amp;X86.HasADX},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{<b>Name</b>: "aes", Feature: &amp;X86.HasAES},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{<b>Name</b>: "avx", Feature: &amp;X86.HasAVX},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{<b>Name</b>: "avx2", Feature: &amp;X86.HasAVX2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{<b>Name</b>: "avx512", Feature: &amp;X86.HasAVX512},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{<b>Name</b>: "avx512f", Feature: &amp;X86.HasAVX512F},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{<b>Name</b>: "avx512cd", Feature: &amp;X86.HasAVX512CD},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{<b>Name</b>: "avx512er", Feature: &amp;X86.HasAVX512ER},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{<b>Name</b>: "avx512pf", Feature: &amp;X86.HasAVX512PF},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{<b>Name</b>: "avx512vl", Feature: &amp;X86.HasAVX512VL},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{<b>Name</b>: "avx512bw", Feature: &amp;X86.HasAVX512BW},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{<b>Name</b>: "avx512dq", Feature: &amp;X86.HasAVX512DQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{<b>Name</b>: "avx512ifma", Feature: &amp;X86.HasAVX512IFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{<b>Name</b>: "avx512vbmi", Feature: &amp;X86.HasAVX512VBMI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{<b>Name</b>: "avx512vnniw", Feature: &amp;X86.HasAVX5124VNNIW},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{<b>Name</b>: "avx5124fmaps", Feature: &amp;X86.HasAVX5124FMAPS},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{<b>Name</b>: "avx512vpopcntdq", Feature: &amp;X86.HasAVX512VPOPCNTDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{<b>Name</b>: "avx512vpclmulqdq", Feature: &amp;X86.HasAVX512VPCLMULQDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{<b>Name</b>: "avx512vnni", Feature: &amp;X86.HasAVX512VNNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{<b>Name</b>: "avx512gfni", Feature: &amp;X86.HasAVX512GFNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{<b>Name</b>: "avx512vaes", Feature: &amp;X86.HasAVX512VAES},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{<b>Name</b>: "avx512vbmi2", Feature: &amp;X86.HasAVX512VBMI2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{<b>Name</b>: "avx512bitalg", Feature: &amp;X86.HasAVX512BITALG},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{<b>Name</b>: "avx512bf16", Feature: &amp;X86.HasAVX512BF16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{<b>Name</b>: "amxtile", Feature: &amp;X86.HasAMXTile},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{<b>Name</b>: "amxint8", Feature: &amp;X86.HasAMXInt8},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{<b>Name</b>: "amxbf16", Feature: &amp;X86.HasAMXBF16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{<b>Name</b>: "bmi1", Feature: &amp;X86.HasBMI1},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{<b>Name</b>: "bmi2", Feature: &amp;X86.HasBMI2},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{<b>Name</b>: "cx16", Feature: &amp;X86.HasCX16},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{<b>Name</b>: "erms", Feature: &amp;X86.HasERMS},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{<b>Name</b>: "fma", Feature: &amp;X86.HasFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{<b>Name</b>: "osxsave", Feature: &amp;X86.HasOSXSAVE},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{<b>Name</b>: "pclmulqdq", Feature: &amp;X86.HasPCLMULQDQ},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{<b>Name</b>: "popcnt", Feature: &amp;X86.HasPOPCNT},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{<b>Name</b>: "rdrand", Feature: &amp;X86.HasRDRAND},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{<b>Name</b>: "rdseed", Feature: &amp;X86.HasRDSEED},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{<b>Name</b>: "sse3", Feature: &amp;X86.HasSSE3},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{<b>Name</b>: "sse41", Feature: &amp;X86.HasSSE41},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{<b>Name</b>: "sse42", Feature: &amp;X86.HasSSE42},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{<b>Name</b>: "ssse3", Feature: &amp;X86.HasSSSE3},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{<b>Name</b>: "avxifma", Feature: &amp;X86.HasAVXIFMA},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{<b>Name</b>: "avxvnni", Feature: &amp;X86.HasAVXVNNI},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{<b>Name</b>: "avxvnniint8", Feature: &amp;X86.HasAVXVNNIInt8},
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{<b>Name</b>: "sse2", Feature: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-268">cpu.go#L268</a>: 	<b>Name</b>      string
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-316" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-316">#L316</a>: 			if options[i].<b>Name</b> == key {
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-332" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-332">#L332</a>: 			print("GODEBUG sys/cpu: can not enable \"", o.<b>Name</b>, "\", missing CPU support\n")
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-337" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-337">#L337</a>: 			print("GODEBUG sys/cpu: can not disable \"", o.<b>Name</b>, "\", required CPU feature\n")
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-15">cpu_x86.go#L15</a>: 		{<b>Name</b>: "adx", Feature: &amp;X86.HasADX},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-16">#L16</a>: 		{<b>Name</b>: "aes", Feature: &amp;X86.HasAES},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-17">#L17</a>: 		{<b>Name</b>: "avx", Feature: &amp;X86.HasAVX},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-18">#L18</a>: 		{<b>Name</b>: "avx2", Feature: &amp;X86.HasAVX2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-19">#L19</a>: 		{<b>Name</b>: "avx512", Feature: &amp;X86.HasAVX512},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-20">#L20</a>: 		{<b>Name</b>: "avx512f", Feature: &amp;X86.HasAVX512F},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-21">#L21</a>: 		{<b>Name</b>: "avx512cd", Feature: &amp;X86.HasAVX512CD},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-22">#L22</a>: 		{<b>Name</b>: "avx512er", Feature: &amp;X86.HasAVX512ER},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-23">#L23</a>: 		{<b>Name</b>: "avx512pf", Feature: &amp;X86.HasAVX512PF},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-24">#L24</a>: 		{<b>Name</b>: "avx512vl", Feature: &amp;X86.HasAVX512VL},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-25">#L25</a>: 		{<b>Name</b>: "avx512bw", Feature: &amp;X86.HasAVX512BW},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-26">#L26</a>: 		{<b>Name</b>: "avx512dq", Feature: &amp;X86.HasAVX512DQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-27">#L27</a>: 		{<b>Name</b>: "avx512ifma", Feature: &amp;X86.HasAVX512IFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-28">#L28</a>: 		{<b>Name</b>: "avx512vbmi", Feature: &amp;X86.HasAVX512VBMI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-29">#L29</a>: 		{<b>Name</b>: "avx512vnniw", Feature: &amp;X86.HasAVX5124VNNIW},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-30">#L30</a>: 		{<b>Name</b>: "avx5124fmaps", Feature: &amp;X86.HasAVX5124FMAPS},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-31">#L31</a>: 		{<b>Name</b>: "avx512vpopcntdq", Feature: &amp;X86.HasAVX512VPOPCNTDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-32">#L32</a>: 		{<b>Name</b>: "avx512vpclmulqdq", Feature: &amp;X86.HasAVX512VPCLMULQDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-33">#L33</a>: 		{<b>Name</b>: "avx512vnni", Feature: &amp;X86.HasAVX512VNNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-34">#L34</a>: 		{<b>Name</b>: "avx512gfni", Feature: &amp;X86.HasAVX512GFNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-35">#L35</a>: 		{<b>Name</b>: "avx512vaes", Feature: &amp;X86.HasAVX512VAES},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-36">#L36</a>: 		{<b>Name</b>: "avx512vbmi2", Feature: &amp;X86.HasAVX512VBMI2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-37">#L37</a>: 		{<b>Name</b>: "avx512bitalg", Feature: &amp;X86.HasAVX512BITALG},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-38">#L38</a>: 		{<b>Name</b>: "avx512bf16", Feature: &amp;X86.HasAVX512BF16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-39">#L39</a>: 		{<b>Name</b>: "amxtile", Feature: &amp;X86.HasAMXTile},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-40">#L40</a>: 		{<b>Name</b>: "amxint8", Feature: &amp;X86.HasAMXInt8},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-41">#L41</a>: 		{<b>Name</b>: "amxbf16", Feature: &amp;X86.HasAMXBF16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-42">#L42</a>: 		{<b>Name</b>: "bmi1", Feature: &amp;X86.HasBMI1},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-43">#L43</a>: 		{<b>Name</b>: "bmi2", Feature: &amp;X86.HasBMI2},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-44">#L44</a>: 		{<b>Name</b>: "cx16", Feature: &amp;X86.HasCX16},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-45">#L45</a>: 		{<b>Name</b>: "erms", Feature: &amp;X86.HasERMS},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-46">#L46</a>: 		{<b>Name</b>: "fma", Feature: &amp;X86.HasFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-47">#L47</a>: 		{<b>Name</b>: "osxsave", Feature: &amp;X86.HasOSXSAVE},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-48">#L48</a>: 		{<b>Name</b>: "pclmulqdq", Feature: &amp;X86.HasPCLMULQDQ},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-49">#L49</a>: 		{<b>Name</b>: "popcnt", Feature: &amp;X86.HasPOPCNT},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-50">#L50</a>: 		{<b>Name</b>: "rdrand", Feature: &amp;X86.HasRDRAND},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-51">#L51</a>: 		{<b>Name</b>: "rdseed", Feature: &amp;X86.HasRDSEED},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-52">#L52</a>: 		{<b>Name</b>: "sse3", Feature: &amp;X86.HasSSE3},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-53">#L53</a>: 		{<b>Name</b>: "sse41", Feature: &amp;X86.HasSSE41},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-54">#L54</a>: 		{<b>Name</b>: "sse42", Feature: &amp;X86.HasSSE42},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-55">#L55</a>: 		{<b>Name</b>: "ssse3", Feature: &amp;X86.HasSSSE3},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-56">#L56</a>: 		{<b>Name</b>: "avxifma", Feature: &amp;X86.HasAVXIFMA},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-57">#L57</a>: 		{<b>Name</b>: "avxvnni", Feature: &amp;X86.HasAVXVNNI},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-58">#L58</a>: 		{<b>Name</b>: "avxvnniint8", Feature: &amp;X86.HasAVXVNNIInt8},
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61" class="path-duplicate">cpu_x86.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">#L61</a>: 		{<b>Name</b>: "sse2", Feature: &amp;X86.HasSSE2, Required: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Required.html b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Required.html
index d3dbe1d929b..f26b31f9586 100644
--- a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Required.html
+++ b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Required.html
@@ -9,15 +9,15 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">Required</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">Required</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">4 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-267">cpu.go#L267</a>: 	<b>Required</b>  bool // whether feature is mandatory and can not be disabled
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-305">#L305</a>: 				options[i].Enable = enable || options[i].<b>Required</b>
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-331">#L331</a>: 		if !o.Enable &amp;&amp; o.<b>Required</b> {
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">cpu_x86.go#L61</a>: 		{Name: "sse2", Feature: &amp;X86.HasSSE2, <b>Required</b>: runtime.GOARCH == "amd64"},
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-272">cpu.go#L272</a>: 	<b>Required</b>  bool // whether feature is mandatory and can not be disabled
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-310">#L310</a>: 				options[i].Enable = enable || options[i].<b>Required</b>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-336">#L336</a>: 		if !o.Enable &amp;&amp; o.<b>Required</b> {
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu_x86.go.html#line-61">cpu_x86.go#L61</a>: 		{Name: "sse2", Feature: &amp;X86.HasSSE2, <b>Required</b>: runtime.GOARCH == "amd64"},
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)
diff --git a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Specified.html b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Specified.html
index 6177ce113d0..211b925a139 100644
--- a/use/vendor/golang.org/x/sys/cpu..option^a11a7.Specified.html
+++ b/use/vendor/golang.org/x/sys/cpu..option^a11a7.Specified.html
@@ -9,15 +9,15 @@
 <script src="../../../../../jvs/golds-v0.8.5.js"></script>
 <body onload="onPageLoad()"><div>
 
-<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">Specified</a></b></span><span style="font-size: large;"><i> (field)</i></span>
+<pre><code><span style="font-size:x-large;"><b><a href="../../../../../pkg/vendor/golang.org/x/sys/cpu.html">vendor/golang.org/x/sys/cpu</a>.<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-262">option</a>.<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">Specified</a></b></span><span style="font-size: large;"><i> (field)</i></span>
 
 <span class="title">4 uses</span>
 
-	vendor/golang.org/x/sys/cpu (current package)
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-265">cpu.go#L265</a>: 	<b>Specified</b> bool // whether feature value was specified in GODEBUG
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-304" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-304">#L304</a>: 				options[i].<b>Specified</b> = true
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-312" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-312">#L312</a>: 				options[i].<b>Specified</b> = true
-		<a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-322" class="path-duplicate">cpu.go</a><a href="../../../../../src/vendor/golang.org/x/sys/cpu/cpu.go.html#line-322">#L322</a>: 		if !o.<b>Specified</b> {
+	<a href="../../../../../pkg/golang.org/x/sys/cpu.html">golang.org/x/sys/cpu</a>
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-270">cpu.go#L270</a>: 	<b>Specified</b> bool // whether feature value was specified in GODEBUG
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-309" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-309">#L309</a>: 				options[i].<b>Specified</b> = true
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-317" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-317">#L317</a>: 				options[i].<b>Specified</b> = true
+		<a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-327" class="path-duplicate">cpu.go</a><a href="../../../../../src/golang.org/x/sys/cpu/cpu.go.html#line-327">#L327</a>: 		if !o.<b>Specified</b> {
 </code></pre><pre id="footer">
 <table><tr><td><img src="../../../../../png/zigo101-twitter.png"></td>
 <td>The pages are generated with <a href="https://go101.org/apps-and-libs/golds.html"><b>Golds</b></a> <i>v0.8.5</i>. (GOOS=linux GOARCH=amd64)