Certificate Extension Implementation

     While I implement the Certificate Policies extension, an issue comes 
     up.  If I'm given the DER encoding of the extension, and the policy 
     element information is not ordered as required for some reason.  
     Should this DER be considered invalid and rejected, or should I accept 
     it and do the ordering myself?  
     
     Thanks
     
     Hoa