1SEQUENCE { 2 [0] { 3 SEQUENCE { 4 [2 PRIMITIVE] { "permitted.example.com" } 5 } 6 SEQUENCE { 7 [2 PRIMITIVE] { "permitted.example2.com" } 8 } 9 SEQUENCE { 10 [2 PRIMITIVE] { "permitted.example3.com." } 11 } 12 SEQUENCE { 13 [2 PRIMITIVE] { "alsopermitted.example.com" } 14 } 15 SEQUENCE { 16 [2 PRIMITIVE] { "stillnotpermitted.excluded.permitted.example.com" } 17 } 18 } 19 [1] { 20 SEQUENCE { 21 [2 PRIMITIVE] { "excluded.permitted.example.com" } 22 } 23 SEQUENCE { 24 [2 PRIMITIVE] { "extraneousexclusion.example.com" } 25 } 26 } 27} 28-----BEGIN NAME CONSTRAINTS----- 29MIHpoIGfMBeCFXBlcm1pdHRlZC5leGFtcGxlLmNvbTAYghZwZXJtaXR0ZWQuZXhhbXBsZTIuY29t 30MBmCF3Blcm1pdHRlZC5leGFtcGxlMy5jb20uMBuCGWFsc29wZXJtaXR0ZWQuZXhhbXBsZS5jb20w 31MoIwc3RpbGxub3RwZXJtaXR0ZWQuZXhjbHVkZWQucGVybWl0dGVkLmV4YW1wbGUuY29toUUwIIIe 32ZXhjbHVkZWQucGVybWl0dGVkLmV4YW1wbGUuY29tMCGCH2V4dHJhbmVvdXNleGNsdXNpb24uZXhh 33bXBsZS5jb20= 34-----END NAME CONSTRAINTS----- 35