2.7 pKICriticalExtensions Attribute
The pKICriticalExtensions attribute is a list of OIDs that identify extensions that MUST have critical flags enabled, if present, in an issued certificate. For more information about critical extensions, see [RFC3280] section 4.2.<9> For schema details of this attribute, see [MS-ADA3] section 2.95.