Reintroduce support for validating DNS commonName subjects when name constraints are present.

[skmcgrail]

Description of changes:

• Reverts c67076d which replaced how certificates are handled when there is a DNS-like name in the certificates subject commonName. (Note this doesn't fully restore the original OpenSSL behavior, as that change seems to have been made before upstream made their source available).
• Reintroduction of the OpenSSL 1.1.1 for identifying DNS-like names in the subject commonName and the ability to use the X509_CHECK_FLAG_NEVER_CHECK_SUBJECT and X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT flags to check this value.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 95.55556% with 6 lines in your changes missing coverage. Please review.

Project coverage is 78.83%. Comparing base (af5fc97) to head (2f1a498).

Files with missing lines	Patch %	Lines
crypto/x509/v3_ncons.c	92.59%	4 Missing ⚠️
crypto/x509/v3_utl.c	81.81%	2 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             x509    #2376   +/-   ##
=======================================
  Coverage   78.82%   78.83%           
=======================================
  Files         622      622           
  Lines      108113   108154   +41     
  Branches    15347    15362   +15     
=======================================
+ Hits        85219    85261   +42     
+ Misses      22241    22240    -1     
  Partials      653      653           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.