Check i against the correct variable. MAX_CERT_EXTENSIONS doesn't always equal 1 + MAX_CHAIN_DEPTH, and the latter is the length of the array.

Author: kareem-wolfssl

src/internal.c

@@ -25925,7 +25925,7 @@ int SendCertificateStatus(WOLFSSL* ssl)
 
                         if (idx > chain->length)
                             break;
-                        if ((i + 1) >= MAX_CERT_EXTENSIONS) {
+                        if ((i + 1) >= (1 + MAX_CHAIN_DEPTH)) {
                             ret = MAX_CERT_EXTENSIONS_ERR;
                             break;
                         }