public byte[] encodeTBS(CertificateEntry certEntry)
            throws SerializationException {
        ByteArrayOutputStream output = new ByteArrayOutputStream();
        encodeTBS(output, certEntry);
        return output.toByteArray();
    }
TLS encode the signed part of the SCT, as described by RFC6962 section 3.2.
common/src/main/java/org/conscrypt/ct/SignedCertificateTimestamp.java