3.1.2.4.2.2.1.7 Certificate.Template.pKICriticalExtensions

The client MUST mark the extensions listed in the Certificate.Template.pKICriticalExtensions datum critical when encoding the extensions in the request. Specifications on the extensions format are in section 2.2.2.7.7.