(PE-4617) JVM Cert authority can now retrieve decoded extension values

It doesn't need to be there, but I left it available for use in the future. Is there a reason we shouldn't expose it?