make sure ext.value always returns set value (if set) + degrade BC octet-string type
real value for alt-names (such as subjectAltName) is likely to be a GeneralName