class sun.security.provider.certpath.ConstraintsChecker extends java.security.cert.PKIXCertPathChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: sun.security.provider.certpath.ConstraintsChecker
  super_class: java.security.cert.PKIXCertPathChecker
{
  private static final sun.security.util.Debug debug;
    descriptor: Lsun/security/util/Debug;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private final int certPathLength;
    descriptor: I
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private int maxPathLength;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private int i;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private sun.security.x509.NameConstraintsExtension prevNC;
    descriptor: Lsun/security/x509/NameConstraintsExtension;
    flags: (0x0002) ACC_PRIVATE

  private java.util.Set<java.lang.String> supportedExts;
    descriptor: Ljava/util/Set;
    flags: (0x0002) ACC_PRIVATE
    Signature: Ljava/util/Set<Ljava/lang/String;>;

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=1, locals=0, args_size=0
         0: .line 55
            ldc "certpath"
            invokestatic sun.security.util.Debug.getInstance:(Ljava/lang/String;)Lsun/security/util/Debug;
            putstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  void <init>(int);
    descriptor: (I)V
    flags: (0x0000) 
    Code:
      stack=2, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // int certPathLength
         0: .line 71
            aload 0 /* this */
            invokespecial java.security.cert.PKIXCertPathChecker.<init>:()V
         1: .line 72
            aload 0 /* this */
            iload 1 /* certPathLength */
            putfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
         2: .line 73
            return
        end local 1 // int certPathLength
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0    3     0            this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    3     1  certPathLength  I
    MethodParameters:
                Name  Flags
      certPathLength  

  public void init(boolean);
    descriptor: (Z)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // boolean forward
         0: .line 77
            iload 1 /* forward */
            ifne 5
         1: .line 78
            aload 0 /* this */
            iconst_0
            putfield sun.security.provider.certpath.ConstraintsChecker.i:I
         2: .line 79
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
         3: .line 80
            aload 0 /* this */
            aconst_null
            putfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
         4: .line 81
            goto 8
         5: .line 82
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
         6: .line 83
            ldc "forward checking not supported"
         7: .line 82
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
         8: .line 85
      StackMap locals:
      StackMap stack:
            return
        end local 1 // boolean forward
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    9     0     this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    9     1  forward  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
         Name  Flags
      forward  

  public boolean isForwardCheckingSupported();
    descriptor: ()Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
         0: .line 89
            iconst_0
            ireturn
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/ConstraintsChecker;

  public java.util.Set<java.lang.String> getSupportedExtensions();
    descriptor: ()Ljava/util/Set;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=4, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
         0: .line 94
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            ifnonnull 5
         1: .line 95
            aload 0 /* this */
            new java.util.HashSet
            dup
            iconst_2
            invokespecial java.util.HashSet.<init>:(I)V
            putfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
         2: .line 96
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.BasicConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         3: .line 97
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.NameConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         4: .line 98
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            invokestatic java.util.Collections.unmodifiableSet:(Ljava/util/Set;)Ljava/util/Set;
            putfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
         5: .line 100
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            areturn
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    6     0  this  Lsun/security/provider/certpath/ConstraintsChecker;
    Signature: ()Ljava/util/Set<Ljava/lang/String;>;

  public void check(java.security.cert.Certificate, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=4, args_size=3
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.Certificate cert
        start local 2 // java.util.Collection unresCritExts
         0: .line 117
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 3 /* currCert */
        start local 3 // java.security.cert.X509Certificate currCert
         1: .line 119
            aload 0 /* this */
            dup
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            iconst_1
            iadd
            putfield sun.security.provider.certpath.ConstraintsChecker.i:I
         2: .line 122
            aload 0 /* this */
            aload 3 /* currCert */
            invokevirtual sun.security.provider.certpath.ConstraintsChecker.checkBasicConstraints:(Ljava/security/cert/X509Certificate;)V
         3: .line 123
            aload 0 /* this */
            aload 3 /* currCert */
            invokevirtual sun.security.provider.certpath.ConstraintsChecker.verifyNameConstraints:(Ljava/security/cert/X509Certificate;)V
         4: .line 125
            aload 2 /* unresCritExts */
            ifnull 7
            aload 2 /* unresCritExts */
            invokeinterface java.util.Collection.isEmpty:()Z
            ifne 7
         5: .line 126
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.BasicConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
         6: .line 127
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.NameConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
         7: .line 129
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            return
        end local 3 // java.security.cert.X509Certificate currCert
        end local 2 // java.util.Collection unresCritExts
        end local 1 // java.security.cert.Certificate cert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0    8     0           this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    8     1           cert  Ljava/security/cert/Certificate;
            0    8     2  unresCritExts  Ljava/util/Collection<Ljava/lang/String;>;
            1    8     3       currCert  Ljava/security/cert/X509Certificate;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/Certificate;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
               Name  Flags
      cert           
      unresCritExts  

  private void verifyNameConstraints(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=7, locals=4, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.X509Certificate currCert
         0: .line 137
            ldc "name constraints"
            astore 2 /* msg */
        start local 2 // java.lang.String msg
         1: .line 138
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 3
         2: .line 139
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         3: .line 145
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            ifnull 15
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            if_icmpeq 5
         4: .line 146
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 15
         5: .line 147
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 9
         6: .line 148
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "prevNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
         7: .line 149
            ldc ", currDN = "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         8: .line 148
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         9: .line 153
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            aload 1 /* currCert */
            invokevirtual sun.security.x509.NameConstraintsExtension.verify:(Ljava/security/cert/X509Certificate;)Z
            ifne 15
        10: .line 154
            new java.security.cert.CertPathValidatorException
            dup
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        11: .line 155
            aconst_null
            aconst_null
            iconst_m1
            getstatic java.security.cert.PKIXReason.INVALID_NAME:Ljava/security/cert/PKIXReason;
        12: .line 154
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;Ljava/security/cert/CertPath;ILjava/security/cert/CertPathValidatorException$Reason;)V
            athrow
        13: .line 157
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 3 /* ioe */
        start local 3 // java.io.IOException ioe
        14: .line 158
            new java.security.cert.CertPathValidatorException
            dup
            aload 3 /* ioe */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.io.IOException ioe
        15: .line 163
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* currCert */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            invokestatic sun.security.provider.certpath.ConstraintsChecker.mergeNameConstraints:(Ljava/security/cert/X509Certificate;Lsun/security/x509/NameConstraintsExtension;)Lsun/security/x509/NameConstraintsExtension;
            putfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
        16: .line 165
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 18
        17: .line 166
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " verified."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        18: .line 167
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String msg
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0   19     0      this  Lsun/security/provider/certpath/ConstraintsChecker;
            0   19     1  currCert  Ljava/security/cert/X509Certificate;
            1   19     2       msg  Ljava/lang/String;
           14   15     3       ioe  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           9    13      13  Class java.io.IOException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  

  static sun.security.x509.NameConstraintsExtension mergeNameConstraints(java.security.cert.X509Certificate, sun.security.x509.NameConstraintsExtension);
    descriptor: (Ljava/security/cert/X509Certificate;Lsun/security/x509/NameConstraintsExtension;)Lsun/security/x509/NameConstraintsExtension;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=5, args_size=2
        start local 0 // java.security.cert.X509Certificate currCert
        start local 1 // sun.security.x509.NameConstraintsExtension prevNC
         0: .line 178
            aload 0 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.toImpl:(Ljava/security/cert/X509Certificate;)Lsun/security/x509/X509CertImpl;
            astore 2 /* currCertImpl */
        start local 2 // sun.security.x509.X509CertImpl currCertImpl
         1: .line 179
            goto 4
        end local 2 // sun.security.x509.X509CertImpl currCertImpl
      StackMap locals:
      StackMap stack: java.security.cert.CertificateException
         2: astore 3 /* ce */
        start local 3 // java.security.cert.CertificateException ce
         3: .line 180
            new java.security.cert.CertPathValidatorException
            dup
            aload 3 /* ce */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.security.cert.CertificateException ce
        start local 2 // sun.security.x509.X509CertImpl currCertImpl
         4: .line 184
      StackMap locals: sun.security.x509.X509CertImpl
      StackMap stack:
            aload 2 /* currCertImpl */
            invokevirtual sun.security.x509.X509CertImpl.getNameConstraintsExtension:()Lsun/security/x509/NameConstraintsExtension;
         5: .line 183
            astore 3 /* newConstraints */
        start local 3 // sun.security.x509.NameConstraintsExtension newConstraints
         6: .line 186
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 10
         7: .line 187
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "prevNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* prevNC */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
         8: .line 188
            ldc ", newNC = "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 3 /* newConstraints */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         9: .line 187
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        10: .line 193
      StackMap locals: sun.security.x509.NameConstraintsExtension
      StackMap stack:
            aload 1 /* prevNC */
            ifnonnull 16
        11: .line 194
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 13
        12: .line 195
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "mergedNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 3 /* newConstraints */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        13: .line 197
      StackMap locals:
      StackMap stack:
            aload 3 /* newConstraints */
            ifnonnull 15
        14: .line 198
            aload 3 /* newConstraints */
            areturn
        15: .line 203
      StackMap locals:
      StackMap stack:
            aload 3 /* newConstraints */
            invokevirtual sun.security.x509.NameConstraintsExtension.clone:()Ljava/lang/Object;
            checkcast sun.security.x509.NameConstraintsExtension
            areturn
        16: .line 208
      StackMap locals:
      StackMap stack:
            aload 1 /* prevNC */
            aload 3 /* newConstraints */
            invokevirtual sun.security.x509.NameConstraintsExtension.merge:(Lsun/security/x509/NameConstraintsExtension;)V
        17: .line 209
            goto 20
      StackMap locals:
      StackMap stack: java.io.IOException
        18: astore 4 /* ioe */
        start local 4 // java.io.IOException ioe
        19: .line 210
            new java.security.cert.CertPathValidatorException
            dup
            aload 4 /* ioe */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.io.IOException ioe
        20: .line 212
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 22
        21: .line 213
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "mergedNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* prevNC */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        22: .line 215
      StackMap locals:
      StackMap stack:
            aload 1 /* prevNC */
            areturn
        end local 3 // sun.security.x509.NameConstraintsExtension newConstraints
        end local 2 // sun.security.x509.X509CertImpl currCertImpl
        end local 1 // sun.security.x509.NameConstraintsExtension prevNC
        end local 0 // java.security.cert.X509Certificate currCert
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   23     0        currCert  Ljava/security/cert/X509Certificate;
            0   23     1          prevNC  Lsun/security/x509/NameConstraintsExtension;
            1    2     2    currCertImpl  Lsun/security/x509/X509CertImpl;
            4   23     2    currCertImpl  Lsun/security/x509/X509CertImpl;
            3    4     3              ce  Ljava/security/cert/CertificateException;
            6   23     3  newConstraints  Lsun/security/x509/NameConstraintsExtension;
           19   20     4             ioe  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           0     1       2  Class java.security.cert.CertificateException
          16    17      18  Class java.io.IOException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  
      prevNC    

  private void checkBasicConstraints(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=7, locals=4, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.X509Certificate currCert
         0: .line 225
            ldc "basic constraints"
            astore 2 /* msg */
        start local 2 // java.lang.String msg
         1: .line 226
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 6
         2: .line 227
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         3: .line 228
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "i = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
         4: .line 229
            ldc ", maxPathLength = "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         5: .line 228
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         6: .line 233
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            if_icmpge 32
         7: .line 247
            iconst_m1
            istore 3 /* pathLenConstraint */
        start local 3 // int pathLenConstraint
         8: .line 248
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getVersion:()I
            iconst_3
            if_icmpge 13
         9: .line 249
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            iconst_1
            if_icmpne 14
        10: .line 250
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifeq 14
        11: .line 251
            ldc 2147483647
            istore 3 /* pathLenConstraint */
        12: .line 254
            goto 14
        13: .line 255
      StackMap locals: int
      StackMap stack:
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            istore 3 /* pathLenConstraint */
        14: .line 258
      StackMap locals:
      StackMap stack:
            iload 3 /* pathLenConstraint */
            iconst_m1
            if_icmpne 19
        15: .line 259
            new java.security.cert.CertPathValidatorException
            dup
        16: .line 260
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed: this is not a CA certificate"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        17: .line 261
            aconst_null
            aconst_null
            iconst_m1
            getstatic java.security.cert.PKIXReason.NOT_CA_CERT:Ljava/security/cert/PKIXReason;
        18: .line 259
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;Ljava/security/cert/CertPath;ILjava/security/cert/CertPathValidatorException$Reason;)V
            athrow
        19: .line 264
      StackMap locals:
      StackMap stack:
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 30
        20: .line 265
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            ifgt 29
        21: .line 266
            new java.security.cert.CertPathValidatorException
            dup
        22: .line 267
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed: pathLenConstraint violated - "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        23: .line 268
            ldc "this cert must be the last cert in the "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        24: .line 269
            ldc "certification path"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        25: .line 267
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        26: .line 269
            aconst_null
            aconst_null
            iconst_m1
        27: .line 270
            getstatic java.security.cert.PKIXReason.PATH_TOO_LONG:Ljava/security/cert/PKIXReason;
        28: .line 266
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;Ljava/security/cert/CertPath;ILjava/security/cert/CertPathValidatorException$Reason;)V
            athrow
        29: .line 272
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            dup
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            iconst_1
            isub
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
        30: .line 274
      StackMap locals:
      StackMap stack:
            iload 3 /* pathLenConstraint */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            if_icmpge 32
        31: .line 275
            aload 0 /* this */
            iload 3 /* pathLenConstraint */
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
        end local 3 // int pathLenConstraint
        32: .line 278
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 35
        33: .line 279
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "after processing, maxPathLength = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        34: .line 280
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " verified."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        35: .line 282
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String msg
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0   36     0               this  Lsun/security/provider/certpath/ConstraintsChecker;
            0   36     1           currCert  Ljava/security/cert/X509Certificate;
            1   36     2                msg  Ljava/lang/String;
            8   32     3  pathLenConstraint  I
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  

  static int mergeBasicConstraints(java.security.cert.X509Certificate, int);
    descriptor: (Ljava/security/cert/X509Certificate;I)I
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=3, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // int maxPathLength
         0: .line 296
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            istore 2 /* pathLenConstraint */
        start local 2 // int pathLenConstraint
         1: .line 298
            aload 0 /* cert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 3
         2: .line 299
            iinc 1 /* maxPathLength */ -1
         3: .line 302
      StackMap locals: int
      StackMap stack:
            iload 2 /* pathLenConstraint */
            iload 1 /* maxPathLength */
            if_icmpge 5
         4: .line 303
            iload 2 /* pathLenConstraint */
            istore 1 /* maxPathLength */
         5: .line 306
      StackMap locals:
      StackMap stack:
            iload 1 /* maxPathLength */
            ireturn
        end local 2 // int pathLenConstraint
        end local 1 // int maxPathLength
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0    6     0               cert  Ljava/security/cert/X509Certificate;
            0    6     1      maxPathLength  I
            1    6     2  pathLenConstraint  I
    MethodParameters:
               Name  Flags
      cert           
      maxPathLength  
}
SourceFile: "ConstraintsChecker.java"
InnerClasses:
  public abstract Reason = java.security.cert.CertPathValidatorException$Reason of java.security.cert.CertPathValidatorException