Note the upstream boringssl is not modified yet: https://boringssl.googlesource.com/boringssl/+/refs/heads/master/crypto/x509/x509_vpm.c#531