pub fn fn_unknown_certificate_extension() -> Result<CertificateExtension, FnError>