Same comment as above, this duplicates cert/crl extension unpacking logic.