crypt32: Accept a certificate if its name matches any permitted subtree of a name...