BouncyCastle X.509 Certificate Extensions in Java: A Subtle Encoding Trap

Introduction If you’ve ever wrangled certificates in Java, you know the standard JDK APIs only go so far. Most real-world setups lean on BouncyCastle, especially when you need flexibility with buildin