I would like to trust a given root very for only a specific domain (and sub domain) I.e *.int.mycorp.com, but not www.mybank.com Browsers don’t let me do that

I would like to trust a given root very for only a specific domain (and sub domain) I.e *.int.mycorp.com, but not www.mybank.com Browsers don’t let me do that, it’s either app or nothing. X509 name constraints aren’t great either and don’t give me, the browser operator, the power.