--preserve-binary=TBSCertificate
--preserve-binary=TBSCRLCertList
--preserve-binary=Name
--sequence=GeneralNames
--sequence=Extensions
--sequence=CRLDistributionPoints