(PE-4617) JVM Cert authority can now retrieve decoded extension values

I'd be in favor of not putting anything into the API until we know that we need it.  Then we don't have to write tests for it either which ensure it works.