A wildcard identifier must be added to the Certificate Extension OIDs (making a “partial OID”). This identifier would only allow OIDs to match numbers and punctuation marks in accordance with the RFC.