pub(crate) fn decode_b64_field( b64: &Option<String>, field_name: &str, ca_label: &str, fallback: &str, ) -> Result<Vec<u8>, String>