verifyingCriticalExtensions

var verifyingCriticalExtensions: [ASN1ObjectIdentifier] { get }

Discussion

X.509 certificates can have extensions marked as critical. These extensions must be understood and enforced by the verifier. If they aren’t understood or processed, then verifying the chain must fail.

Verifier uses the VerifierPolicy/verifyingCriticalExtensions field to determine what extensions are understood by a given VerifierPolicy. A VerifierPolicy understands the union of all the understood extensions of its contained VerifierPolicy objects.

This may be an empty array, if the policy does not concern itself with any particular extensions. Users must only put an extension value in this space if they are actually enforcing the rules of that particular extension value.