class sun.security.provider.certpath.ConstraintsChecker extends java.security.cert.PKIXCertPathChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: sun.security.provider.certpath.ConstraintsChecker
  super_class: java.security.cert.PKIXCertPathChecker
{
  private static final sun.security.util.Debug debug;
    descriptor: Lsun/security/util/Debug;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private final int certPathLength;
    descriptor: I
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private int maxPathLength;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private int i;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private sun.security.x509.NameConstraintsExtension prevNC;
    descriptor: Lsun/security/x509/NameConstraintsExtension;
    flags: (0x0002) ACC_PRIVATE

  private static java.util.Set<java.lang.String> supportedExts;
    descriptor: Ljava/util/Set;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Signature: Ljava/util/Set<Ljava/lang/String;>;

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=1, locals=0, args_size=0
         0: .line 53
            ldc "certpath"
            invokestatic sun.security.util.Debug.getInstance:(Ljava/lang/String;)Lsun/security/util/Debug;
            putstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
         1: .line 62
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  void <init>(int);
    descriptor: (I)V
    flags: (0x0000) 
    Code:
      stack=2, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // int certPathLength
         0: .line 70
            aload 0 /* this */
            invokespecial java.security.cert.PKIXCertPathChecker.<init>:()V
         1: .line 71
            aload 0 /* this */
            iload 1 /* certPathLength */
            putfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
         2: .line 72
            aload 0 /* this */
            iconst_0
            invokevirtual sun.security.provider.certpath.ConstraintsChecker.init:(Z)V
         3: .line 73
            return
        end local 1 // int certPathLength
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0    4     0            this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    4     1  certPathLength  I
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
                Name  Flags
      certPathLength  

  public void init(boolean);
    descriptor: (Z)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // boolean forward
         0: .line 76
            iload 1 /* forward */
            ifne 5
         1: .line 77
            aload 0 /* this */
            iconst_0
            putfield sun.security.provider.certpath.ConstraintsChecker.i:I
         2: .line 78
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
         3: .line 79
            aload 0 /* this */
            aconst_null
            putfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
         4: .line 80
            goto 8
         5: .line 81
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
         6: .line 82
            ldc "forward checking not supported"
         7: .line 81
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
         8: .line 84
      StackMap locals:
      StackMap stack:
            return
        end local 1 // boolean forward
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    9     0     this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    9     1  forward  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
         Name  Flags
      forward  

  public boolean isForwardCheckingSupported();
    descriptor: ()Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
         0: .line 87
            iconst_0
            ireturn
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/ConstraintsChecker;

  public java.util.Set<java.lang.String> getSupportedExtensions();
    descriptor: ()Ljava/util/Set;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
         0: .line 91
            getstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            ifnonnull 5
         1: .line 92
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
         2: .line 93
            getstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.BasicConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         3: .line 94
            getstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.NameConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         4: .line 95
            getstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            invokestatic java.util.Collections.unmodifiableSet:(Ljava/util/Set;)Ljava/util/Set;
            putstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
         5: .line 97
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.supportedExts:Ljava/util/Set;
            areturn
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    6     0  this  Lsun/security/provider/certpath/ConstraintsChecker;
    Signature: ()Ljava/util/Set<Ljava/lang/String;>;

  public void check(java.security.cert.Certificate, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=4, args_size=3
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.Certificate cert
        start local 2 // java.util.Collection unresCritExts
         0: .line 113
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 3 /* currCert */
        start local 3 // java.security.cert.X509Certificate currCert
         1: .line 115
            aload 0 /* this */
            dup
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            iconst_1
            iadd
            putfield sun.security.provider.certpath.ConstraintsChecker.i:I
         2: .line 118
            aload 0 /* this */
            aload 3 /* currCert */
            invokevirtual sun.security.provider.certpath.ConstraintsChecker.checkBasicConstraints:(Ljava/security/cert/X509Certificate;)V
         3: .line 119
            aload 0 /* this */
            aload 3 /* currCert */
            invokevirtual sun.security.provider.certpath.ConstraintsChecker.verifyNameConstraints:(Ljava/security/cert/X509Certificate;)V
         4: .line 121
            aload 2 /* unresCritExts */
            ifnull 7
            aload 2 /* unresCritExts */
            invokeinterface java.util.Collection.isEmpty:()Z
            ifne 7
         5: .line 122
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.BasicConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
         6: .line 123
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.NameConstraints_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
         7: .line 125
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            return
        end local 3 // java.security.cert.X509Certificate currCert
        end local 2 // java.util.Collection unresCritExts
        end local 1 // java.security.cert.Certificate cert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0    8     0           this  Lsun/security/provider/certpath/ConstraintsChecker;
            0    8     1           cert  Ljava/security/cert/Certificate;
            0    8     2  unresCritExts  Ljava/util/Collection<Ljava/lang/String;>;
            1    8     3       currCert  Ljava/security/cert/X509Certificate;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/Certificate;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
               Name  Flags
      cert           
      unresCritExts  

  private void verifyNameConstraints(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=4, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.X509Certificate currCert
         0: .line 133
            ldc "name constraints"
            astore 2 /* msg */
        start local 2 // java.lang.String msg
         1: .line 134
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 3
         2: .line 135
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         3: .line 141
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            ifnull 12
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            if_icmpeq 5
         4: .line 142
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 12
         5: .line 143
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 8
         6: .line 144
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "prevNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         7: .line 145
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "currDN = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         8: .line 149
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            aload 1 /* currCert */
            invokevirtual sun.security.x509.NameConstraintsExtension.verify:(Ljava/security/cert/X509Certificate;)Z
            ifne 12
         9: .line 150
            new java.security.cert.CertPathValidatorException
            dup
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        10: .line 152
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 3 /* ioe */
        start local 3 // java.io.IOException ioe
        11: .line 153
            new java.security.cert.CertPathValidatorException
            dup
            aload 3 /* ioe */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.io.IOException ioe
        12: .line 158
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* currCert */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
            invokestatic sun.security.provider.certpath.ConstraintsChecker.mergeNameConstraints:(Ljava/security/cert/X509Certificate;Lsun/security/x509/NameConstraintsExtension;)Lsun/security/x509/NameConstraintsExtension;
            putfield sun.security.provider.certpath.ConstraintsChecker.prevNC:Lsun/security/x509/NameConstraintsExtension;
        13: .line 160
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 15
        14: .line 161
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " verified."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        15: .line 162
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String msg
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0   16     0      this  Lsun/security/provider/certpath/ConstraintsChecker;
            0   16     1  currCert  Ljava/security/cert/X509Certificate;
            1   16     2       msg  Ljava/lang/String;
           11   12     3       ioe  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           8    10      10  Class java.io.IOException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  

  static sun.security.x509.NameConstraintsExtension mergeNameConstraints(java.security.cert.X509Certificate, sun.security.x509.NameConstraintsExtension);
    descriptor: (Ljava/security/cert/X509Certificate;Lsun/security/x509/NameConstraintsExtension;)Lsun/security/x509/NameConstraintsExtension;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=5, args_size=2
        start local 0 // java.security.cert.X509Certificate currCert
        start local 1 // sun.security.x509.NameConstraintsExtension prevNC
         0: .line 173
            aload 0 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.toImpl:(Ljava/security/cert/X509Certificate;)Lsun/security/x509/X509CertImpl;
            astore 2 /* currCertImpl */
        start local 2 // sun.security.x509.X509CertImpl currCertImpl
         1: .line 174
            goto 4
        end local 2 // sun.security.x509.X509CertImpl currCertImpl
      StackMap locals:
      StackMap stack: java.security.cert.CertificateException
         2: astore 3 /* ce */
        start local 3 // java.security.cert.CertificateException ce
         3: .line 175
            new java.security.cert.CertPathValidatorException
            dup
            aload 3 /* ce */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.security.cert.CertificateException ce
        start local 2 // sun.security.x509.X509CertImpl currCertImpl
         4: .line 179
      StackMap locals: sun.security.x509.X509CertImpl
      StackMap stack:
            aload 2 /* currCertImpl */
            invokevirtual sun.security.x509.X509CertImpl.getNameConstraintsExtension:()Lsun/security/x509/NameConstraintsExtension;
         5: .line 178
            astore 3 /* newConstraints */
        start local 3 // sun.security.x509.NameConstraintsExtension newConstraints
         6: .line 181
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 9
         7: .line 182
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "prevNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* prevNC */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         8: .line 183
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "newNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 3 /* newConstraints */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         9: .line 188
      StackMap locals: sun.security.x509.NameConstraintsExtension
      StackMap stack:
            aload 1 /* prevNC */
            ifnonnull 15
        10: .line 189
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 12
        11: .line 190
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "mergedNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 3 /* newConstraints */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        12: .line 192
      StackMap locals:
      StackMap stack:
            aload 3 /* newConstraints */
            ifnonnull 14
        13: .line 193
            aload 3 /* newConstraints */
            areturn
        14: .line 198
      StackMap locals:
      StackMap stack:
            aload 3 /* newConstraints */
            invokevirtual sun.security.x509.NameConstraintsExtension.clone:()Ljava/lang/Object;
            checkcast sun.security.x509.NameConstraintsExtension
            areturn
        15: .line 203
      StackMap locals:
      StackMap stack:
            aload 1 /* prevNC */
            aload 3 /* newConstraints */
            invokevirtual sun.security.x509.NameConstraintsExtension.merge:(Lsun/security/x509/NameConstraintsExtension;)V
        16: .line 204
            goto 19
      StackMap locals:
      StackMap stack: java.io.IOException
        17: astore 4 /* ioe */
        start local 4 // java.io.IOException ioe
        18: .line 205
            new java.security.cert.CertPathValidatorException
            dup
            aload 4 /* ioe */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.io.IOException ioe
        19: .line 207
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 21
        20: .line 208
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "mergedNC = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* prevNC */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        21: .line 210
      StackMap locals:
      StackMap stack:
            aload 1 /* prevNC */
            areturn
        end local 3 // sun.security.x509.NameConstraintsExtension newConstraints
        end local 2 // sun.security.x509.X509CertImpl currCertImpl
        end local 1 // sun.security.x509.NameConstraintsExtension prevNC
        end local 0 // java.security.cert.X509Certificate currCert
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   22     0        currCert  Ljava/security/cert/X509Certificate;
            0   22     1          prevNC  Lsun/security/x509/NameConstraintsExtension;
            1    2     2    currCertImpl  Lsun/security/x509/X509CertImpl;
            4   22     2    currCertImpl  Lsun/security/x509/X509CertImpl;
            3    4     3              ce  Ljava/security/cert/CertificateException;
            6   22     3  newConstraints  Lsun/security/x509/NameConstraintsExtension;
           18   19     4             ioe  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           0     1       2  Class java.security.cert.CertificateException
          15    16      17  Class java.io.IOException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  
      prevNC    

  private void checkBasicConstraints(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=4, args_size=2
        start local 0 // sun.security.provider.certpath.ConstraintsChecker this
        start local 1 // java.security.cert.X509Certificate currCert
         0: .line 220
            ldc "basic constraints"
            astore 2 /* msg */
        start local 2 // java.lang.String msg
         1: .line 221
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 5
         2: .line 222
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         3: .line 223
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "i = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         4: .line 224
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "maxPathLength = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         5: .line 228
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.i:I
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.certPathLength:I
            if_icmpge 22
         6: .line 229
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            istore 3 /* pathLenConstraint */
        start local 3 // int pathLenConstraint
         7: .line 230
            iload 3 /* pathLenConstraint */
            iconst_m1
            if_icmpne 11
         8: .line 231
            new java.security.cert.CertPathValidatorException
            dup
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed: "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
         9: .line 232
            ldc "this is not a CA certificate"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        10: .line 231
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        11: .line 235
      StackMap locals: int
      StackMap stack:
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 20
        12: .line 236
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            ifgt 19
        13: .line 237
            new java.security.cert.CertPathValidatorException
            dup
        14: .line 238
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed: pathLenConstraint violated - "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        15: .line 239
            ldc "this cert must be the last cert in the "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        16: .line 240
            ldc "certification path"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        17: .line 238
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        18: .line 237
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        19: .line 242
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            dup
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            iconst_1
            isub
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
        20: .line 244
      StackMap locals:
      StackMap stack:
            iload 3 /* pathLenConstraint */
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            if_icmpge 22
        21: .line 245
            aload 0 /* this */
            iload 3 /* pathLenConstraint */
            putfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
        end local 3 // int pathLenConstraint
        22: .line 248
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            ifnull 25
        23: .line 249
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "after processing, maxPathLength = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield sun.security.provider.certpath.ConstraintsChecker.maxPathLength:I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        24: .line 250
            getstatic sun.security.provider.certpath.ConstraintsChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            aload 2 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " verified."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        25: .line 252
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String msg
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.ConstraintsChecker this
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0   26     0               this  Lsun/security/provider/certpath/ConstraintsChecker;
            0   26     1           currCert  Ljava/security/cert/X509Certificate;
            1   26     2                msg  Ljava/lang/String;
            7   22     3  pathLenConstraint  I
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  

  static int mergeBasicConstraints(java.security.cert.X509Certificate, int);
    descriptor: (Ljava/security/cert/X509Certificate;I)I
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=3, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // int maxPathLength
         0: .line 266
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            istore 2 /* pathLenConstraint */
        start local 2 // int pathLenConstraint
         1: .line 268
            aload 0 /* cert */
            invokestatic sun.security.x509.X509CertImpl.isSelfIssued:(Ljava/security/cert/X509Certificate;)Z
            ifne 3
         2: .line 269
            iinc 1 /* maxPathLength */ -1
         3: .line 272
      StackMap locals: int
      StackMap stack:
            iload 2 /* pathLenConstraint */
            iload 1 /* maxPathLength */
            if_icmpge 5
         4: .line 273
            iload 2 /* pathLenConstraint */
            istore 1 /* maxPathLength */
         5: .line 276
      StackMap locals:
      StackMap stack:
            iload 1 /* maxPathLength */
            ireturn
        end local 2 // int pathLenConstraint
        end local 1 // int maxPathLength
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0    6     0               cert  Ljava/security/cert/X509Certificate;
            0    6     1      maxPathLength  I
            1    6     2  pathLenConstraint  I
    MethodParameters:
               Name  Flags
      cert           
      maxPathLength  
}
SourceFile: "ConstraintsChecker.java"