(PE-4617) JVM Cert authority can now retrieve decoded extension values

Ha right, which is totally misleading.  I would expect `X509Extension` to represent one of those extensions, not represent the thing that may or may not have many extensions.