Support indefinite-length TLVs

No tests included yet, but the parser was able to handle a PKCS#12
certificate exported from Firefox.