The sun.security.x509.X509CRLImpl.getExtensionValue(String) method is difficult
to use. It returns the OCTET STRING representing the X509 Extension
extnValue field, which encapsulates encoding of the actual extension class.
For comparison purposes, one wants to compare the extension value from the
CRL with a constructed extension value. This can't be done with the
existing methods.