cert_option_list
if (cert_option_list(ret, k->cert->critical,
if (cert_option_list(ret, k->cert->extensions,