docs: private static boolean isCritical(final X509Certificate certificate, final String extensionOid) {
          val criticalOids = certificate.getCriticalExtensionOIDs();
          if (criticalOids == null || criticalOids.isEmpty()) {
              return false;
          }
          return criticalOids.contains(extensionOid);
      }