The cryptography package prior to 41.0.2 for Python mishandles SSH certificates that have critical options.
cryptography project cryptography