fn check_basic_constraints( input: Option<&mut Reader<'_>>, role: Role, sub_ca_count: usize, ) -> Result<(), Error>