Extension handlers work in tandem with the Policy Module to set custom extensions on a certificate. Each extension handler acts as a template for the custom extensions that should appear in a certificate. The appropriate extension handler must be loaded by the Policy Module when needed.