expose enough api to allow for a correct *re*-implementation if X509V3_EXT_print (NUL byte SAN issue)