Extension handlers work in tandem with the Policy Module to set custom extensions on a certificate. Each extension handler acts as a template for the custom extensions that should appear in a certificate. The appropriate extension handler must be loaded by the Policy Module when needed. Extension handlers can also be loaded by an exit module and used to decode custom extensions in a certificate.