If differential parsing of X.509 certificates is a material security concern for something, then that's a bug in that thing.