PolicyMappings extensions marked CRITICAL

["Dan Proietti" <dproietti@corestreet.com>]

A number (if not all) of the certificates in the test suite that include
a PolicyMappings extension also mark it CRITICAL.  This seems to be a
violation of the specification, according to RFC 3280 Section 4.2.1.6
which states:

   This extension MAY be supported by CAs and/or applications, and it
   MUST be non-critical.

I'm concerned that this could cause otherwise conforming path validation
routines to fail the suite because the criticality indicator is not
expected to be set and no semantics are defined for it, in either 3280
or the PKITS documentation.


Dan Proietti