https://tools.ietf.org/html/rfc5280#section-4.2.1.10 https://tools.ietf.org/html/rfc5280#section-4.2.1.10 It does exist. Now do I trust the existing certificat

https://tools.ietf.org/html/rfc5280#section-4.2.1.10 https://tools.ietf.org/html/rfc5280#section-4.2.1.10 It does exist. Now do I trust the existing certificate validation code to do the right thing in all cases in presence of the extension? Not one second.