rpstir2 accepts unknown critical extensions to the CA certificate

[Koenvh1]

According to https://datatracker.ietf.org/doc/html/rfc6487#section-4.8:

A certificate-using system MUST reject the
certificate if it encounters a critical extension it does not
recognize

However, based on testing with a yet unassigned critical OID, it seems like rpstir2 does in fact accept certificates when there are unknown critical extensions. I do not expect this to be have any security impact, but it is part of the specs.

[cpusoft]

thanks

The critical extension has been checked more carefully in the new version, and the results will be printed in the log and stored in the database.