Decodes one ASN.1-backed value via DER bytes.
Override this when you need a non-DER fallback representation.