code: public static byte[] getExtensionValue(byte [] certExtValue)
  	throws IOException {
  	ByteArrayInputStream inStream = new ByteArrayInputStream(certExtValue);
  	ASN1InputStream derInputStream = new ASN1InputStream(inStream);
          ASN1Primitive object = derInputStream.readObject();
  	if (object instanceof ASN1OctetString) {
  	    return ((ASN1OctetString)object).getOctets();
  	} else {
  	    throw new IOException(i18n.getMessage("octectExp"));
  	}
      }
docs: Retrieves the actual value of the X.509 extension.
  
  @param certExtValue the DER-encoded OCTET string value of the extension.
  @return the decoded/actual value of the extension (the octets).