if (!CryptDecodeObject(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, szOID_SUBJECT_ALT_NAME2,
        data, data_len, 0, NULL, &struct_info_len)) {
    RETURN_FALSE;
}
void *struct_info = emalloc(struct_info_len);
if (!CryptDecodeObject(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, szOID_SUBJECT_ALT_NAME2,
        data, data_len, 0, struct_info, &struct_info_len)) {
    RETURN_FALSE;
}
PCERT_ALT_NAME_INFO cert_alt_name_info = struct_info;
while(cert_alt_name_info->cAltEntry-- > 0) {
    CERT_ALT_NAME_ENTRY cert_alt_name_entry = cert_alt_name_info->rgAltEntry[cert_alt_name_info->cAltEntry];
    if (cert_alt_name_entry.dwAltNameChoice == CERT_ALT_NAME_OTHER_NAME) {
        // и вот здесь два результат с двумя ведущими некорректными байтами
        // [0C 26] D0 9E D0 90 D0 9E
        // [0C 2E] D0 A1 D0 B5 D1 81
        // cert_alt_name_entry._empty_union_.pOtherName->Value.pbData
    }
}