der解码规则_如何在Java中解码DER编码的字符串？

I'm trying to read a custom extension from a digital certificate. I know the value is a GeneralString encoded in DER. Is there an easy way to correctly decode it and get a Java String? I tried the following, but 's' includes some of the encoding metadata as junk characters at the start of the string.

byte[] ext = cert.getExtensionValue("1.2.3.4");

String s= new String(ext);

System.out.println(s);

Is there a quick and easy way to do this? Or do I really need to use some full fledged ASN.1 library?

Thanks!

解决方案

BouncyCastle is (among everything else):

A library for reading and writing encoded ASN.1 objects.