So I was approved for Family Controls (Distribution) capability on my main app target 'com.example.app'. I also have 3 extensions that are used for my Screen Time features: Device Activity Monitor Extension ('com.example.app.deviceActivityMonitor') Shield Action Extension ('com.example.app.shieldAction') Shield Configuration ('com.example.app.shieldConfig') However when I go to Distribute App, I am getting errors for each of the extensions not having proper qualifications. (One for each extension) So in order to solve this I needed to submit 3 additional requests for each extension certificate. I was worried this would take long (initial request too 3 weeks) - but luckily the additional requests were approved within an hour! Hopefully this helps others. I'm not sure if theres a better way to handle this using a wildcard identifier?