crit should be validated in verification.

Reference: https://datatracker.ietf.org/doc/html/rfc8152#section-3.1