It is not proper for ZCertificate to list unknown extensions parallel with X.509v3 extensions

[GOODPWDCETCSZ]

ZCertificate lists unknown extensions at the level same to X.509v3 extensions. It is not proper since v1 and v2 X.509 certificate have no extension. Unknown extensions should be listed in X.509v3 extensions.

cert-example-ie-cer48.zip