3.2.2.6.2.1.4.4.6 pKICriticalExtensions
CAs MUST use this attribute to determine which extension is to be marked critical in the certificate for the request that is being processed. Specifications on certificates format and extensions are in [RFC3280] section 4.2.