change AuthorityInfoAccess to pure ASN.1...next up SAN
crldistributionpoints now pure ASN.1 (but not parsing the entire RFC

spectrum of behaviors)
pure ASN.1 parsing for subjectalternativename