title: How to extract the AuthorityKeyIdentifier from a X509Certificate2 in .NET
body: <p>I am looking for a way to extract the AuthorityKeyIdentifier extension from an X509Certificate2 instance.  I did not see any built-in support for this but since windows can properly construct a certificate chain I know the functionality has to exist at some level.  If the answer is to roll a DER parser, is there a good implementation that can be referenced? </p>