| Index: net/cert/cert_verify_proc.cc
 | 
| diff --git a/net/cert/cert_verify_proc.cc b/net/cert/cert_verify_proc.cc
 | 
| index a182b4628d06e3e9f046be43a4627a47e121cf08..c2c5930c305abd0a79d9eaf0767f7e659675cb3a 100644
 | 
| --- a/net/cert/cert_verify_proc.cc
 | 
| +++ b/net/cert/cert_verify_proc.cc
 | 
| @@ -565,13 +565,11 @@ static bool CheckNameConstraints(const std::vector<std::string>& dns_names,
 | 
|      if (host_info.IsIPAddress())
 | 
|        continue;
 | 
|  
 | 
| -    const size_t registry_len = registry_controlled_domains::GetRegistryLength(
 | 
| -        dns_name,
 | 
| -        registry_controlled_domains::EXCLUDE_UNKNOWN_REGISTRIES,
 | 
| -        registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES);
 | 
|      // If the name is not in a known TLD, ignore it. This permits internal
 | 
|      // names.
 | 
| -    if (registry_len == 0)
 | 
| +    if (!registry_controlled_domains::HostHasRegistryControlledDomain(
 | 
| +            dns_name, registry_controlled_domains::EXCLUDE_UNKNOWN_REGISTRIES,
 | 
| +            registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES))
 | 
|        continue;
 | 
|  
 | 
|      for (size_t j = 0; domains[j][0]; ++j) {
 | 
| 
 |