(PE-4617) JVM Cert authority can now retrieve decoded extension values

As far as I can tell, Puppet doesn't care about which extensions is critical or not, but it's possible other consumers of this library may in the future. I kept them separate as there's no place in a simple map to put an indicator of the extensions's "criticalness." I could just write an additional method for consumers who don't care which simple merges both maps.