encodedValue

The content octet this value was decoded from, or the canonical octet when the value was constructed rather than decoded.

X.690 8.2.2 lets a sender encode TRUE as any non-zero octet, and Android KeyMint emits 0x01. Retaining that octet instead of normalising it to 0xFF is what keeps ASN1.encode(ASN1.decode(bytes)) equal to bytes, which this package tests as a contract and which structures signed over their decoded form — such as the entry extensions of a CRL, reached through a plain SEQUENCE — depend on.