The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.