SEQUENCE {
  [0] {
    SEQUENCE {
      [2 PRIMITIVE] { "permitted.example.com" }
    }
    SEQUENCE {
      [2 PRIMITIVE] { "permitted.example2.com" }
    }
    SEQUENCE {
      [2 PRIMITIVE] { "permitted.example3.com." }
    }
    SEQUENCE {
      [2 PRIMITIVE] { "alsopermitted.example.com" }
    }
    SEQUENCE {
      [2 PRIMITIVE] { "stillnotpermitted.excluded.permitted.example.com" }
    }
  }
  [1] {
    SEQUENCE {
      [2 PRIMITIVE] { "excluded.permitted.example.com" }
    }
    SEQUENCE {
      [2 PRIMITIVE] { "extraneousexclusion.example.com" }
    }
  }
}
-----BEGIN NAME CONSTRAINTS-----
MIHpoIGfMBeCFXBlcm1pdHRlZC5leGFtcGxlLmNvbTAYghZwZXJtaXR0ZWQuZXhhbXBsZTIuY29t
MBmCF3Blcm1pdHRlZC5leGFtcGxlMy5jb20uMBuCGWFsc29wZXJtaXR0ZWQuZXhhbXBsZS5jb20w
MoIwc3RpbGxub3RwZXJtaXR0ZWQuZXhjbHVkZWQucGVybWl0dGVkLmV4YW1wbGUuY29toUUwIIIe
ZXhjbHVkZWQucGVybWl0dGVkLmV4YW1wbGUuY29tMCGCH2V4dHJhbmVvdXNleGNsdXNpb24uZXhh
bXBsZS5jb20=
-----END NAME CONSTRAINTS-----