The policy module interface for specifying certificate properties and extensions is meant to be as simple as possible so that customers can control the information in a certificate from Microsoft® Visual Basic® without having to deal with the complexities of ASN.1 encoding. However, in those cases where customers want to create their own custom extensions or need to encode a complex extension, they can use the extensibility of extension handler routines.