code: func PKIXNameFromRawSubject(raw []byte) (*pkix.Name, error) {
  	var subject pkix.RDNSequence
  	if _, err := asn1.Unmarshal(raw, &subject); err != nil {
  		return nil, err
  	}
  	var name pkix.Name
  	name.FillFromRDNSequence(&subject)
  	return &name, nil
  }
docs: // PKIXNameFromRawSubject attempts to parse a DER encoded "Subject" as a PKIX
  // Name. It's useful for inspecting root certificates in an x509.CertPool which
  // only expose RawSubject via the Subjects method.