class sun.security.provider.certpath.CrlRevocationChecker extends java.security.cert.PKIXCertPathChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: sun.security.provider.certpath.CrlRevocationChecker
  super_class: java.security.cert.PKIXCertPathChecker
{
  private static final sun.security.util.Debug debug;
    descriptor: Lsun/security/util/Debug;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private final java.security.cert.TrustAnchor mAnchor;
    descriptor: Ljava/security/cert/TrustAnchor;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final java.util.List<java.security.cert.CertStore> mStores;
    descriptor: Ljava/util/List;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/List<Ljava/security/cert/CertStore;>;

  private final java.lang.String mSigProvider;
    descriptor: Ljava/lang/String;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final java.util.Date mCurrentTime;
    descriptor: Ljava/util/Date;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private java.security.PublicKey mPrevPubKey;
    descriptor: Ljava/security/PublicKey;
    flags: (0x0002) ACC_PRIVATE

  private boolean mCRLSignFlag;
    descriptor: Z
    flags: (0x0002) ACC_PRIVATE

  private java.util.HashSet<java.security.cert.X509CRL> mPossibleCRLs;
    descriptor: Ljava/util/HashSet;
    flags: (0x0002) ACC_PRIVATE
    Signature: Ljava/util/HashSet<Ljava/security/cert/X509CRL;>;

  private java.util.HashSet<java.security.cert.X509CRL> mApprovedCRLs;
    descriptor: Ljava/util/HashSet;
    flags: (0x0002) ACC_PRIVATE
    Signature: Ljava/util/HashSet<Ljava/security/cert/X509CRL;>;

  private final java.security.cert.PKIXParameters mParams;
    descriptor: Ljava/security/cert/PKIXParameters;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private static final boolean[] mCrlSignUsage;
    descriptor: [Z
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final boolean[] ALL_REASONS;
    descriptor: [Z
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private boolean mOnlyEECert;
    descriptor: Z
    flags: (0x0002) ACC_PRIVATE

  private static final long MAX_CLOCK_SKEW;
    descriptor: J
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 900000

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 68
            ldc "certpath"
            invokestatic sun.security.util.Debug.getInstance:(Ljava/lang/String;)Lsun/security/util/Debug;
            putstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
         1: .line 79
            bipush 7
            newarray 4
            dup
            bipush 6
            iconst_1
            bastore
         2: .line 78
            putstatic sun.security.provider.certpath.CrlRevocationChecker.mCrlSignUsage:[Z
         3: .line 81
            bipush 9
            newarray 4
            dup
            iconst_0
            iconst_1
            bastore
            dup
            iconst_1
            iconst_1
            bastore
            dup
            iconst_2
            iconst_1
            bastore
            dup
            iconst_3
            iconst_1
            bastore
            dup
            iconst_4
            iconst_1
            bastore
            dup
            iconst_5
            iconst_1
            bastore
            dup
            bipush 6
            iconst_1
            bastore
            dup
            bipush 7
            iconst_1
            bastore
            dup
            bipush 8
            iconst_1
            bastore
         4: .line 80
            putstatic sun.security.provider.certpath.CrlRevocationChecker.ALL_REASONS:[Z
         5: .line 86
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  void <init>(java.security.cert.TrustAnchor, java.security.cert.PKIXParameters);
    descriptor: (Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;)V
    flags: (0x0000) 
    Code:
      stack=4, locals=3, args_size=3
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.TrustAnchor anchor
        start local 2 // java.security.cert.PKIXParameters params
         0: .line 98
            aload 0 /* this */
            aload 1 /* anchor */
            aload 2 /* params */
            aconst_null
            invokespecial sun.security.provider.certpath.CrlRevocationChecker.<init>:(Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection;)V
         1: .line 99
            return
        end local 2 // java.security.cert.PKIXParameters params
        end local 1 // java.security.cert.TrustAnchor anchor
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    2     0    this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0    2     1  anchor  Ljava/security/cert/TrustAnchor;
            0    2     2  params  Ljava/security/cert/PKIXParameters;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
        Name  Flags
      anchor  
      params  

  void <init>(java.security.cert.TrustAnchor, java.security.cert.PKIXParameters, java.util.Collection<java.security.cert.X509Certificate>);
    descriptor: (Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection;)V
    flags: (0x0000) 
    Code:
      stack=5, locals=4, args_size=4
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.TrustAnchor anchor
        start local 2 // java.security.cert.PKIXParameters params
        start local 3 // java.util.Collection certs
         0: .line 117
            aload 0 /* this */
            aload 1 /* anchor */
            aload 2 /* params */
            aload 3 /* certs */
            iconst_0
            invokespecial sun.security.provider.certpath.CrlRevocationChecker.<init>:(Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection;Z)V
         1: .line 118
            return
        end local 3 // java.util.Collection certs
        end local 2 // java.security.cert.PKIXParameters params
        end local 1 // java.security.cert.TrustAnchor anchor
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    2     0    this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0    2     1  anchor  Ljava/security/cert/TrustAnchor;
            0    2     2  params  Ljava/security/cert/PKIXParameters;
            0    2     3   certs  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;)V
    MethodParameters:
        Name  Flags
      anchor  
      params  
      certs   

  void <init>(java.security.cert.TrustAnchor, java.security.cert.PKIXParameters, java.util.Collection<java.security.cert.X509Certificate>, );
    descriptor: (Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection;Z)V
    flags: (0x0000) 
    Code:
      stack=5, locals=6, args_size=5
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.TrustAnchor anchor
        start local 2 // java.security.cert.PKIXParameters params
        start local 3 // java.util.Collection certs
        start local 4 // boolean onlyEECert
         0: .line 120
            aload 0 /* this */
            invokespecial java.security.cert.PKIXCertPathChecker.<init>:()V
         1: .line 82
            aload 0 /* this */
            iconst_0
            putfield sun.security.provider.certpath.CrlRevocationChecker.mOnlyEECert:Z
         2: .line 124
            aload 0 /* this */
            aload 1 /* anchor */
            putfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
         3: .line 125
            aload 0 /* this */
            aload 2 /* params */
            putfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
         4: .line 126
            aload 0 /* this */
            new java.util.ArrayList
            dup
            aload 2 /* params */
            invokevirtual java.security.cert.PKIXParameters.getCertStores:()Ljava/util/List;
            invokespecial java.util.ArrayList.<init>:(Ljava/util/Collection;)V
            putfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
         5: .line 127
            aload 0 /* this */
            aload 2 /* params */
            invokevirtual java.security.cert.PKIXParameters.getSigProvider:()Ljava/lang/String;
            putfield sun.security.provider.certpath.CrlRevocationChecker.mSigProvider:Ljava/lang/String;
         6: .line 128
            aload 3 /* certs */
            ifnull 16
         7: .line 130
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
            ldc "Collection"
         8: .line 131
            new java.security.cert.CollectionCertStoreParameters
            dup
            aload 3 /* certs */
            invokespecial java.security.cert.CollectionCertStoreParameters.<init>:(Ljava/util/Collection;)V
         9: .line 130
            invokestatic java.security.cert.CertStore.getInstance:(Ljava/lang/String;Ljava/security/cert/CertStoreParameters;)Ljava/security/cert/CertStore;
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        10: .line 132
            goto 16
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.TrustAnchor java.security.cert.PKIXParameters java.util.Collection int
      StackMap stack: java.lang.Exception
        11: astore 5 /* e */
        start local 5 // java.lang.Exception e
        12: .line 135
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 16
        13: .line 136
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker: error creating Collection CertStore: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        14: .line 137
            aload 5 /* e */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        15: .line 136
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        end local 5 // java.lang.Exception e
        16: .line 141
      StackMap locals:
      StackMap stack:
            aload 2 /* params */
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            astore 5 /* testDate */
        start local 5 // java.util.Date testDate
        17: .line 142
            aload 0 /* this */
            aload 5 /* testDate */
            ifnull 18
            aload 5 /* testDate */
            goto 19
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.TrustAnchor java.security.cert.PKIXParameters java.util.Collection int java.util.Date
      StackMap stack: sun.security.provider.certpath.CrlRevocationChecker
        18: new java.util.Date
            dup
            invokespecial java.util.Date.<init>:()V
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.TrustAnchor java.security.cert.PKIXParameters java.util.Collection int java.util.Date
      StackMap stack: sun.security.provider.certpath.CrlRevocationChecker java.util.Date
        19: putfield sun.security.provider.certpath.CrlRevocationChecker.mCurrentTime:Ljava/util/Date;
        20: .line 143
            aload 0 /* this */
            iload 4 /* onlyEECert */
            putfield sun.security.provider.certpath.CrlRevocationChecker.mOnlyEECert:Z
        21: .line 144
            aload 0 /* this */
            iconst_0
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.init:(Z)V
        22: .line 145
            return
        end local 5 // java.util.Date testDate
        end local 4 // boolean onlyEECert
        end local 3 // java.util.Collection certs
        end local 2 // java.security.cert.PKIXParameters params
        end local 1 // java.security.cert.TrustAnchor anchor
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   23     0        this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0   23     1      anchor  Ljava/security/cert/TrustAnchor;
            0   23     2      params  Ljava/security/cert/PKIXParameters;
            0   23     3       certs  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
            0   23     4  onlyEECert  Z
           12   16     5           e  Ljava/lang/Exception;
           17   23     5    testDate  Ljava/util/Date;
      Exception table:
        from    to  target  type
           7    10      11  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/TrustAnchor;Ljava/security/cert/PKIXParameters;Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;Z)V
    MethodParameters:
            Name  Flags
      anchor      
      params      
      certs       
      onlyEECert  

  public void init(boolean);
    descriptor: (Z)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // boolean forward
         0: .line 153
            iload 1 /* forward */
            ifne 10
         1: .line 154
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            ifnull 7
         2: .line 155
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            ifnull 5
         3: .line 156
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            putfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
         4: .line 157
            goto 8
         5: .line 158
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            putfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
         6: .line 160
            goto 8
         7: .line 161
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aconst_null
            putfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
         8: .line 163
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            iconst_1
            putfield sun.security.provider.certpath.CrlRevocationChecker.mCRLSignFlag:Z
         9: .line 164
            goto 11
        10: .line 165
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
            ldc "forward checking not supported"
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        11: .line 168
      StackMap locals:
      StackMap stack:
            return
        end local 1 // boolean forward
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0   12     0     this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0   12     1  forward  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
         Name  Flags
      forward  

  public boolean isForwardCheckingSupported();
    descriptor: ()Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
         0: .line 171
            iconst_0
            ireturn
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/CrlRevocationChecker;

  public java.util.Set<java.lang.String> getSupportedExtensions();
    descriptor: ()Ljava/util/Set;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
         0: .line 175
            aconst_null
            areturn
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/CrlRevocationChecker;
    Signature: ()Ljava/util/Set<Ljava/lang/String;>;

  public void check(java.security.cert.Certificate, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=5, locals=5, args_size=3
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.Certificate cert
        start local 2 // java.util.Collection unresolvedCritExts
         0: .line 191
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 3 /* currCert */
        start local 3 // java.security.cert.X509Certificate currCert
         1: .line 192
            aload 0 /* this */
            aload 3 /* currCert */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mCRLSignFlag:Z
            iconst_1
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyRevocationStatus:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZ)V
         2: .line 195
            aload 3 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 4 /* cKey */
        start local 4 // java.security.PublicKey cKey
         3: .line 196
            aload 4 /* cKey */
            instanceof java.security.interfaces.DSAPublicKey
            ifeq 6
         4: .line 197
            aload 4 /* cKey */
            checkcast java.security.interfaces.DSAPublicKey
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            ifnonnull 6
         5: .line 199
            aload 4 /* cKey */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
            invokestatic sun.security.provider.certpath.BasicChecker.makeInheritedParamsKey:(Ljava/security/PublicKey;Ljava/security/PublicKey;)Ljava/security/PublicKey;
            astore 4 /* cKey */
         6: .line 201
      StackMap locals: java.security.cert.X509Certificate java.security.PublicKey
      StackMap stack:
            aload 0 /* this */
            aload 4 /* cKey */
            putfield sun.security.provider.certpath.CrlRevocationChecker.mPrevPubKey:Ljava/security/PublicKey;
         7: .line 202
            aload 0 /* this */
            aload 3 /* currCert */
            invokestatic sun.security.provider.certpath.CrlRevocationChecker.certCanSignCrl:(Ljava/security/cert/X509Certificate;)Z
            putfield sun.security.provider.certpath.CrlRevocationChecker.mCRLSignFlag:Z
         8: .line 203
            return
        end local 4 // java.security.PublicKey cKey
        end local 3 // java.security.cert.X509Certificate currCert
        end local 2 // java.util.Collection unresolvedCritExts
        end local 1 // java.security.cert.Certificate cert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot                Name  Signature
            0    9     0                this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0    9     1                cert  Ljava/security/cert/Certificate;
            0    9     2  unresolvedCritExts  Ljava/util/Collection<Ljava/lang/String;>;
            1    9     3            currCert  Ljava/security/cert/X509Certificate;
            3    9     4                cKey  Ljava/security/PublicKey;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/Certificate;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
                    Name  Flags
      cert                
      unresolvedCritExts  

  public boolean check(java.security.cert.X509Certificate, java.security.PublicKey, boolean);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Z)Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=5, locals=4, args_size=4
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.X509Certificate currCert
        start local 2 // java.security.PublicKey prevKey
        start local 3 // boolean signFlag
         0: .line 222
            aload 0 /* this */
            aload 1 /* currCert */
            aload 2 /* prevKey */
            iload 3 /* signFlag */
            iconst_1
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyRevocationStatus:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZ)V
         1: .line 223
            aload 1 /* currCert */
            invokestatic sun.security.provider.certpath.CrlRevocationChecker.certCanSignCrl:(Ljava/security/cert/X509Certificate;)Z
            ireturn
        end local 3 // boolean signFlag
        end local 2 // java.security.PublicKey prevKey
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0    2     0      this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0    2     1  currCert  Ljava/security/cert/X509Certificate;
            0    2     2   prevKey  Ljava/security/PublicKey;
            0    2     3  signFlag  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
          Name  Flags
      currCert  
      prevKey   
      signFlag  

  static boolean certCanSignCrl(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Z
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=2, args_size=1
        start local 0 // java.security.cert.X509Certificate currCert
         0: .line 237
            aload 0 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getKeyUsage:()[Z
            astore 1 /* kbools */
        start local 1 // boolean[] kbools
         1: .line 238
            aload 1 /* kbools */
            ifnull 3
         2: .line 239
            aload 1 /* kbools */
            bipush 6
            baload
            ireturn
         3: .line 241
      StackMap locals: boolean[]
      StackMap stack:
            iconst_0
            ireturn
        end local 1 // boolean[] kbools
        end local 0 // java.security.cert.X509Certificate currCert
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0    4     0  currCert  Ljava/security/cert/X509Certificate;
            1    4     1    kbools  [Z
    MethodParameters:
          Name  Flags
      currCert  

  private void verifyRevocationStatus(java.security.cert.X509Certificate, java.security.PublicKey, boolean, boolean);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZ)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=7, locals=5, args_size=5
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.X509Certificate currCert
        start local 2 // java.security.PublicKey prevKey
        start local 3 // boolean signFlag
        start local 4 // boolean allowSeparateKey
         0: .line 251
            aload 0 /* this */
            aload 1 /* currCert */
            aload 2 /* prevKey */
            iload 3 /* signFlag */
         1: .line 252
            iload 4 /* allowSeparateKey */
            aconst_null
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getTrustAnchors:()Ljava/util/Set;
         2: .line 251
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyRevocationStatus:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZLjava/util/Set;Ljava/util/Set;)V
         3: .line 253
            return
        end local 4 // boolean allowSeparateKey
        end local 3 // boolean signFlag
        end local 2 // java.security.PublicKey prevKey
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0    4     0              this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0    4     1          currCert  Ljava/security/cert/X509Certificate;
            0    4     2           prevKey  Ljava/security/PublicKey;
            0    4     3          signFlag  Z
            0    4     4  allowSeparateKey  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
                  Name  Flags
      currCert          
      prevKey           
      signFlag          
      allowSeparateKey  

  private void verifyRevocationStatus(java.security.cert.X509Certificate, java.security.PublicKey, boolean, boolean, java.util.Set<java.security.cert.X509Certificate>, java.util.Set<java.security.cert.TrustAnchor>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZLjava/util/Set;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=10, locals=15, args_size=7
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.X509Certificate currCert
        start local 2 // java.security.PublicKey prevKey
        start local 3 // boolean signFlag
        start local 4 // boolean allowSeparateKey
        start local 5 // java.util.Set stackedCerts
        start local 6 // java.util.Set trustAnchors
         0: .line 270
            ldc "revocation status"
            astore 7 /* msg */
        start local 7 // java.lang.String msg
         1: .line 271
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 5
         2: .line 272
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus() ---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         3: .line 273
            aload 7 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         4: .line 272
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         5: .line 276
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mOnlyEECert:Z
            ifeq 9
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            iconst_m1
            if_icmpeq 9
         6: .line 277
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 8
         7: .line 278
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "Skipping revocation check, not end entity cert"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         8: .line 280
      StackMap locals:
      StackMap stack:
            return
         9: .line 286
      StackMap locals:
      StackMap stack:
            aload 5 /* stackedCerts */
            ifnull 15
            aload 5 /* stackedCerts */
            aload 1 /* currCert */
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifeq 15
        10: .line 287
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 12
        11: .line 288
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "CrlRevocationChecker.verifyRevocationStatus() circular dependency"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        12: .line 291
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
        13: .line 292
            ldc "Could not determine revocation status"
        14: .line 291
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        15: .line 296
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putfield sun.security.provider.certpath.CrlRevocationChecker.mPossibleCRLs:Ljava/util/HashSet;
        16: .line 297
            aload 0 /* this */
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
        17: .line 298
            bipush 9
            newarray 4
            astore 8 /* reasonsMask */
        start local 8 // boolean[] reasonsMask
        18: .line 301
            new java.security.cert.X509CRLSelector
            dup
            invokespecial java.security.cert.X509CRLSelector.<init>:()V
            astore 9 /* sel */
        start local 9 // java.security.cert.X509CRLSelector sel
        19: .line 302
            aload 9 /* sel */
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509CRLSelector.setCertificateChecking:(Ljava/security/cert/X509Certificate;)V
        20: .line 303
            aload 9 /* sel */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mCurrentTime:Ljava/util/Date;
            ldc 900000
            invokestatic sun.security.provider.certpath.CertPathHelper.setDateAndTime:(Ljava/security/cert/X509CRLSelector;Ljava/util/Date;J)V
        21: .line 305
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 11
            goto 27
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] java.security.cert.X509CRLSelector top java.util.Iterator
      StackMap stack:
        22: aload 11
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.CertStore
            astore 10 /* mStore */
        start local 10 // java.security.cert.CertStore mStore
        23: .line 306
            aload 10 /* mStore */
            aload 9 /* sel */
            invokevirtual java.security.cert.CertStore.getCRLs:(Ljava/security/cert/CRLSelector;)Ljava/util/Collection;
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 13
            goto 26
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] java.security.cert.X509CRLSelector java.security.cert.CertStore java.util.Iterator top java.util.Iterator
      StackMap stack:
        24: aload 13
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.CRL
            astore 12 /* crl */
        start local 12 // java.security.cert.CRL crl
        25: .line 307
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPossibleCRLs:Ljava/util/HashSet;
            aload 12 /* crl */
            checkcast java.security.cert.X509CRL
            invokevirtual java.util.HashSet.add:(Ljava/lang/Object;)Z
            pop
        end local 12 // java.security.cert.CRL crl
        26: .line 306
      StackMap locals:
      StackMap stack:
            aload 13
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 24
        end local 10 // java.security.cert.CertStore mStore
        27: .line 305
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] java.security.cert.X509CRLSelector top java.util.Iterator
      StackMap stack:
            aload 11
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 22
        28: .line 311
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
            aload 9 /* sel */
            iload 3 /* signFlag */
        29: .line 312
            aload 2 /* prevKey */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mSigProvider:Ljava/lang/String;
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
            aload 8 /* reasonsMask */
            aload 6 /* trustAnchors */
        30: .line 313
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            aconst_null
        31: .line 311
            invokestatic sun.security.provider.certpath.DistributionPointFetcher.getCRLs:(Ljava/security/cert/X509CRLSelector;ZLjava/security/PublicKey;Ljava/lang/String;Ljava/util/List;[ZLjava/util/Set;Ljava/util/Date;Ljava/lang/String;)Ljava/util/Collection;
            invokevirtual java.util.HashSet.addAll:(Ljava/util/Collection;)Z
            pop
        end local 9 // java.security.cert.X509CRLSelector sel
        32: .line 314
            goto 39
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[]
      StackMap stack: java.lang.Exception
        33: astore 9 /* e */
        start local 9 // java.lang.Exception e
        34: .line 315
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 38
        35: .line 316
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus() unexpected exception: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        36: .line 317
            aload 9 /* e */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        37: .line 316
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        38: .line 319
      StackMap locals: java.lang.Exception
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
            aload 9 /* e */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 9 // java.lang.Exception e
        39: .line 322
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 43
        40: .line 323
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus() crls.size() = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        41: .line 324
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPossibleCRLs:Ljava/util/HashSet;
            invokevirtual java.util.HashSet.size:()I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        42: .line 323
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        43: .line 326
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPossibleCRLs:Ljava/util/HashSet;
            invokevirtual java.util.HashSet.isEmpty:()Z
            ifne 47
        44: .line 329
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mPossibleCRLs:Ljava/util/HashSet;
            aload 1 /* currCert */
        45: .line 330
            iload 3 /* signFlag */
            aload 2 /* prevKey */
            aload 8 /* reasonsMask */
            aload 6 /* trustAnchors */
        46: .line 329
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyPossibleCRLs:(Ljava/util/Set;Ljava/security/cert/X509Certificate;ZLjava/security/PublicKey;[ZLjava/util/Set;)Ljava/util/Collection;
            invokevirtual java.util.HashSet.addAll:(Ljava/util/Collection;)Z
            pop
        47: .line 332
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 51
        48: .line 333
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus() approved crls.size() = "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        49: .line 334
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
            invokevirtual java.util.HashSet.size:()I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        50: .line 333
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        51: .line 339
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
            invokevirtual java.util.HashSet.isEmpty:()Z
            ifne 53
        52: .line 340
            aload 8 /* reasonsMask */
            getstatic sun.security.provider.certpath.CrlRevocationChecker.ALL_REASONS:[Z
            invokestatic java.util.Arrays.equals:([Z[Z)Z
            ifne 61
        53: .line 341
      StackMap locals:
      StackMap stack:
            iload 4 /* allowSeparateKey */
            ifeq 58
        54: .line 342
            aload 0 /* this */
            aload 1 /* currCert */
            aload 2 /* prevKey */
            iload 3 /* signFlag */
        55: .line 343
            aload 5 /* stackedCerts */
        56: .line 342
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyWithSeparateSigningKey:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZLjava/util/Set;)V
        57: .line 344
            return
        58: .line 346
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
        59: .line 347
            ldc "Could not determine revocation status"
        60: .line 346
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        61: .line 352
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 67
        62: .line 353
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getSerialNumber:()Ljava/math/BigInteger;
            astore 9 /* sn */
        start local 9 // java.math.BigInteger sn
        63: .line 354
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "CrlRevocationChecker.verifyRevocationStatus() starting the final sweep..."
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        64: .line 356
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus cert SN: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        65: .line 357
            aload 9 /* sn */
            invokevirtual java.math.BigInteger.toString:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        66: .line 356
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        end local 9 // java.math.BigInteger sn
        67: .line 360
      StackMap locals:
      StackMap stack:
            iconst_0
            istore 9 /* reasonCode */
        start local 9 // int reasonCode
        68: .line 361
            aconst_null
            astore 10 /* entry */
        start local 10 // sun.security.x509.X509CRLEntryImpl entry
        69: .line 362
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mApprovedCRLs:Ljava/util/HashSet;
            invokevirtual java.util.HashSet.iterator:()Ljava/util/Iterator;
            astore 12
            goto 105
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] int sun.security.x509.X509CRLEntryImpl top java.util.Iterator
      StackMap stack:
        70: aload 12
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 11 /* crl */
        start local 11 // java.security.cert.X509CRL crl
        71: .line 363
            aload 11 /* crl */
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509CRL.getRevokedCertificate:(Ljava/security/cert/X509Certificate;)Ljava/security/cert/X509CRLEntry;
            astore 13 /* e */
        start local 13 // java.security.cert.X509CRLEntry e
        72: .line 364
            aload 13 /* e */
            ifnull 105
        73: .line 366
            aload 13 /* e */
            invokestatic sun.security.x509.X509CRLEntryImpl.toImpl:(Ljava/security/cert/X509CRLEntry;)Lsun/security/x509/X509CRLEntryImpl;
            astore 10 /* entry */
        74: .line 367
            aload 10 /* entry */
            invokevirtual sun.security.x509.X509CRLEntryImpl.getReasonCode:()Ljava/lang/Integer;
            astore 14 /* reason */
        start local 14 // java.lang.Integer reason
        75: .line 370
            aload 14 /* reason */
            ifnonnull 77
        76: .line 371
            iconst_0
            goto 78
        77: .line 372
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] int sun.security.x509.X509CRLEntryImpl java.security.cert.X509CRL java.util.Iterator java.security.cert.X509CRLEntry java.lang.Integer
      StackMap stack:
            aload 14 /* reason */
            invokevirtual java.lang.Integer.intValue:()I
        78: .line 370
      StackMap locals:
      StackMap stack: int
            istore 9 /* reasonCode */
        end local 14 // java.lang.Integer reason
        79: .line 373
            goto 82
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] int sun.security.x509.X509CRLEntryImpl java.security.cert.X509CRL java.util.Iterator java.security.cert.X509CRLEntry
      StackMap stack: java.lang.Exception
        80: astore 14 /* ex */
        start local 14 // java.lang.Exception ex
        81: .line 374
            new java.security.cert.CertPathValidatorException
            dup
            aload 14 /* ex */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 14 // java.lang.Exception ex
        82: .line 376
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 86
        83: .line 377
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyRevocationStatus CRL entry: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        84: .line 378
            aload 10 /* entry */
            invokevirtual sun.security.x509.X509CRLEntryImpl.toString:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        85: .line 377
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        86: .line 386
      StackMap locals:
      StackMap stack:
            aload 10 /* entry */
            invokevirtual sun.security.x509.X509CRLEntryImpl.getCriticalExtensionOIDs:()Ljava/util/Set;
            astore 14 /* unresCritExts */
        start local 14 // java.util.Set unresCritExts
        87: .line 387
            aload 14 /* unresCritExts */
            ifnull 102
            aload 14 /* unresCritExts */
            invokeinterface java.util.Set.isEmpty:()Z
            ifne 102
        88: .line 389
            aload 14 /* unresCritExts */
        89: .line 390
            getstatic sun.security.x509.PKIXExtensions.ReasonCode_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
        90: .line 389
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        91: .line 391
            aload 14 /* unresCritExts */
        92: .line 392
            getstatic sun.security.x509.PKIXExtensions.CertificateIssuer_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
        93: .line 391
            invokeinterface java.util.Set.remove:(Ljava/lang/Object;)Z
            pop
        94: .line 393
            aload 14 /* unresCritExts */
            invokeinterface java.util.Set.isEmpty:()Z
            ifne 102
        95: .line 394
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 99
        96: .line 395
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "Unrecognized critical extension(s) in revoked CRL entry: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        97: .line 397
            aload 14 /* unresCritExts */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        98: .line 395
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        99: .line 399
      StackMap locals: java.util.Set
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
       100: .line 400
            ldc "Could not determine revocation status"
       101: .line 399
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
       102: .line 404
      StackMap locals:
      StackMap stack:
            new sun.security.provider.certpath.CrlRevocationChecker$CertificateRevokedException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Certificate has been revoked, reason: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
       103: .line 405
            iload 9 /* reasonCode */
            invokestatic sun.security.provider.certpath.CrlRevocationChecker.reasonToString:(I)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
       104: .line 404
            invokespecial sun.security.provider.certpath.CrlRevocationChecker$CertificateRevokedException.<init>:(Ljava/lang/String;)V
            athrow
        end local 14 // java.util.Set unresCritExts
        end local 13 // java.security.cert.X509CRLEntry e
        end local 11 // java.security.cert.X509CRL crl
       105: .line 362
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey int int java.util.Set java.util.Set java.lang.String boolean[] int sun.security.x509.X509CRLEntryImpl top java.util.Iterator
      StackMap stack:
            aload 12
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 70
       106: .line 408
            return
        end local 10 // sun.security.x509.X509CRLEntryImpl entry
        end local 9 // int reasonCode
        end local 8 // boolean[] reasonsMask
        end local 7 // java.lang.String msg
        end local 6 // java.util.Set trustAnchors
        end local 5 // java.util.Set stackedCerts
        end local 4 // boolean allowSeparateKey
        end local 3 // boolean signFlag
        end local 2 // java.security.PublicKey prevKey
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0  107     0              this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0  107     1          currCert  Ljava/security/cert/X509Certificate;
            0  107     2           prevKey  Ljava/security/PublicKey;
            0  107     3          signFlag  Z
            0  107     4  allowSeparateKey  Z
            0  107     5      stackedCerts  Ljava/util/Set<Ljava/security/cert/X509Certificate;>;
            0  107     6      trustAnchors  Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;
            1  107     7               msg  Ljava/lang/String;
           18  107     8       reasonsMask  [Z
           19   32     9               sel  Ljava/security/cert/X509CRLSelector;
           23   27    10            mStore  Ljava/security/cert/CertStore;
           25   26    12               crl  Ljava/security/cert/CRL;
           34   39     9                 e  Ljava/lang/Exception;
           63   67     9                sn  Ljava/math/BigInteger;
           68  107     9        reasonCode  I
           69  107    10             entry  Lsun/security/x509/X509CRLEntryImpl;
           71  105    11               crl  Ljava/security/cert/X509CRL;
           72  105    13                 e  Ljava/security/cert/X509CRLEntry;
           75   79    14            reason  Ljava/lang/Integer;
           81   82    14                ex  Ljava/lang/Exception;
           87  105    14     unresCritExts  Ljava/util/Set<Ljava/lang/String;>;
      Exception table:
        from    to  target  type
          18    32      33  Class java.lang.Exception
          73    79      80  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZLjava/util/Set<Ljava/security/cert/X509Certificate;>;Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;)V
    MethodParameters:
                  Name  Flags
      currCert          
      prevKey           
      signFlag          
      allowSeparateKey  
      stackedCerts      
      trustAnchors      

  private void verifyWithSeparateSigningKey(java.security.cert.X509Certificate, java.security.PublicKey, boolean, java.util.Set<java.security.cert.X509Certificate>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZLjava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=4, locals=6, args_size=5
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.X509Certificate currCert
        start local 2 // java.security.PublicKey prevKey
        start local 3 // boolean signFlag
        start local 4 // java.util.Set stackedCerts
         0: .line 435
            ldc "revocation status"
            astore 5 /* msg */
        start local 5 // java.lang.String msg
         1: .line 436
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 7
         2: .line 437
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
         3: .line 438
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.verifyWithSeparateSigningKey() ---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         4: .line 439
            aload 5 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
         5: .line 438
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         6: .line 437
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         7: .line 445
      StackMap locals: java.lang.String
      StackMap stack:
            aload 4 /* stackedCerts */
            ifnull 15
            aload 4 /* stackedCerts */
            aload 1 /* currCert */
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifeq 15
         8: .line 446
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 12
         9: .line 447
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
        10: .line 448
            ldc "CrlRevocationChecker.verifyWithSeparateSigningKey() circular dependency"
        11: .line 447
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        12: .line 451
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
        13: .line 452
            ldc "Could not determine revocation status"
        14: .line 451
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        15: .line 457
      StackMap locals:
      StackMap stack:
            iload 3 /* signFlag */
            ifne 17
        16: .line 458
            aconst_null
            astore 2 /* prevKey */
        17: .line 463
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* currCert */
            aload 2 /* prevKey */
            aload 4 /* stackedCerts */
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.buildToNewKey:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Set;)V
        18: .line 464
            return
        end local 5 // java.lang.String msg
        end local 4 // java.util.Set stackedCerts
        end local 3 // boolean signFlag
        end local 2 // java.security.PublicKey prevKey
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   19     0          this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0   19     1      currCert  Ljava/security/cert/X509Certificate;
            0   19     2       prevKey  Ljava/security/PublicKey;
            0   19     3      signFlag  Z
            0   19     4  stackedCerts  Ljava/util/Set<Ljava/security/cert/X509Certificate;>;
            1   19     5           msg  Ljava/lang/String;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZLjava/util/Set<Ljava/security/cert/X509Certificate;>;)V
    MethodParameters:
              Name  Flags
      currCert      
      prevKey       
      signFlag      
      stackedCerts  

  private void buildToNewKey(java.security.cert.X509Certificate, java.security.PublicKey, java.util.Set<java.security.cert.X509Certificate>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Set;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=7, locals=16, args_size=4
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.security.cert.X509Certificate currCert
        start local 2 // java.security.PublicKey prevKey
        start local 3 // java.util.Set stackedCerts
         0: .line 484
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 2
         1: .line 485
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "CrlRevocationChecker.buildToNewKey() starting work"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         2: .line 488
      StackMap locals:
      StackMap stack:
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 4 /* badKeys */
        start local 4 // java.util.Set badKeys
         3: .line 489
            aload 2 /* prevKey */
            ifnull 5
         4: .line 490
            aload 4 /* badKeys */
            aload 2 /* prevKey */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         5: .line 492
      StackMap locals: java.util.Set
      StackMap stack:
            new sun.security.provider.certpath.CrlRevocationChecker$RejectKeySelector
            dup
            aload 4 /* badKeys */
            invokespecial sun.security.provider.certpath.CrlRevocationChecker$RejectKeySelector.<init>:(Ljava/util/Set;)V
            astore 5 /* certSel */
        start local 5 // java.security.cert.X509CertSelector certSel
         6: .line 493
            aload 5 /* certSel */
            aload 1 /* currCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.security.cert.X509CertSelector.setSubject:(Ljavax/security/auth/x500/X500Principal;)V
         7: .line 494
            aload 5 /* certSel */
            getstatic sun.security.provider.certpath.CrlRevocationChecker.mCrlSignUsage:[Z
            invokevirtual java.security.cert.X509CertSelector.setKeyUsage:([Z)V
         8: .line 497
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            ifnonnull 9
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getTrustAnchors:()Ljava/util/Set;
            goto 10
         9: .line 498
      StackMap locals: java.security.cert.X509CertSelector
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mAnchor:Ljava/security/cert/TrustAnchor;
            invokestatic java.util.Collections.singleton:(Ljava/lang/Object;)Ljava/util/Set;
        10: .line 496
      StackMap locals:
      StackMap stack: java.util.Set
            astore 6 /* newAnchors */
        start local 6 // java.util.Set newAnchors
        11: .line 501
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            instanceof java.security.cert.PKIXBuilderParameters
            ifeq 19
        12: .line 502
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.clone:()Ljava/lang/Object;
            checkcast java.security.cert.PKIXBuilderParameters
            astore 7 /* builderParams */
        start local 7 // java.security.cert.PKIXBuilderParameters builderParams
        13: .line 503
            aload 7 /* builderParams */
            aload 5 /* certSel */
            invokevirtual java.security.cert.PKIXBuilderParameters.setTargetCertConstraints:(Ljava/security/cert/CertSelector;)V
        14: .line 506
            aload 7 /* builderParams */
            iconst_1
            invokevirtual java.security.cert.PKIXBuilderParameters.setPolicyQualifiersRejected:(Z)V
        15: .line 508
            aload 7 /* builderParams */
            aload 6 /* newAnchors */
            invokevirtual java.security.cert.PKIXBuilderParameters.setTrustAnchors:(Ljava/util/Set;)V
        16: .line 509
            goto 35
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters
      StackMap stack: java.security.InvalidAlgorithmParameterException
        17: astore 8 /* iape */
        start local 8 // java.security.InvalidAlgorithmParameterException iape
        18: .line 510
            new java.lang.RuntimeException
            dup
            aload 8 /* iape */
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 8 // java.security.InvalidAlgorithmParameterException iape
        end local 7 // java.security.cert.PKIXBuilderParameters builderParams
        19: .line 519
      StackMap locals:
      StackMap stack:
            new java.security.cert.PKIXBuilderParameters
            dup
            aload 6 /* newAnchors */
            aload 5 /* certSel */
            invokespecial java.security.cert.PKIXBuilderParameters.<init>:(Ljava/util/Set;Ljava/security/cert/CertSelector;)V
            astore 7 /* builderParams */
        start local 7 // java.security.cert.PKIXBuilderParameters builderParams
        20: .line 520
            goto 23
        end local 7 // java.security.cert.PKIXBuilderParameters builderParams
      StackMap locals:
      StackMap stack: java.security.InvalidAlgorithmParameterException
        21: astore 8 /* iape */
        start local 8 // java.security.InvalidAlgorithmParameterException iape
        22: .line 521
            new java.lang.RuntimeException
            dup
            aload 8 /* iape */
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 8 // java.security.InvalidAlgorithmParameterException iape
        start local 7 // java.security.cert.PKIXBuilderParameters builderParams
        23: .line 523
      StackMap locals: java.security.cert.PKIXBuilderParameters
      StackMap stack:
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getInitialPolicies:()Ljava/util/Set;
            invokevirtual java.security.cert.PKIXBuilderParameters.setInitialPolicies:(Ljava/util/Set;)V
        24: .line 524
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
            invokevirtual java.security.cert.PKIXBuilderParameters.setCertStores:(Ljava/util/List;)V
        25: .line 525
            aload 7 /* builderParams */
        26: .line 526
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.isExplicitPolicyRequired:()Z
        27: .line 525
            invokevirtual java.security.cert.PKIXBuilderParameters.setExplicitPolicyRequired:(Z)V
        28: .line 527
            aload 7 /* builderParams */
        29: .line 528
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.isPolicyMappingInhibited:()Z
        30: .line 527
            invokevirtual java.security.cert.PKIXBuilderParameters.setPolicyMappingInhibited:(Z)V
        31: .line 529
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.isAnyPolicyInhibited:()Z
            invokevirtual java.security.cert.PKIXBuilderParameters.setAnyPolicyInhibited:(Z)V
        32: .line 533
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            invokevirtual java.security.cert.PKIXBuilderParameters.setDate:(Ljava/util/Date;)V
        33: .line 534
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getCertPathCheckers:()Ljava/util/List;
            invokevirtual java.security.cert.PKIXBuilderParameters.setCertPathCheckers:(Ljava/util/List;)V
        34: .line 535
            aload 7 /* builderParams */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getSigProvider:()Ljava/lang/String;
            invokevirtual java.security.cert.PKIXBuilderParameters.setSigProvider:(Ljava/lang/String;)V
        35: .line 541
      StackMap locals:
      StackMap stack:
            aload 7 /* builderParams */
            iconst_0
            invokevirtual java.security.cert.PKIXBuilderParameters.setRevocationEnabled:(Z)V
        36: .line 544
            getstatic sun.security.provider.certpath.Builder.USE_AIA:Z
            ifeq 59
        37: .line 545
            aconst_null
            astore 8 /* currCertImpl */
        start local 8 // sun.security.x509.X509CertImpl currCertImpl
        38: .line 547
            aload 1 /* currCert */
            invokestatic sun.security.x509.X509CertImpl.toImpl:(Ljava/security/cert/X509Certificate;)Lsun/security/x509/X509CertImpl;
            astore 8 /* currCertImpl */
        39: .line 548
            goto 45
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters sun.security.x509.X509CertImpl
      StackMap stack: java.security.cert.CertificateException
        40: astore 9 /* ce */
        start local 9 // java.security.cert.CertificateException ce
        41: .line 550
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 45
        42: .line 551
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.buildToNewKey: error decoding cert: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        43: .line 552
            aload 9 /* ce */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        44: .line 551
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        end local 9 // java.security.cert.CertificateException ce
        45: .line 555
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 9 /* aiaExt */
        start local 9 // sun.security.x509.AuthorityInfoAccessExtension aiaExt
        46: .line 556
            aload 8 /* currCertImpl */
            ifnull 48
        47: .line 557
            aload 8 /* currCertImpl */
            invokevirtual sun.security.x509.X509CertImpl.getAuthorityInfoAccessExtension:()Lsun/security/x509/AuthorityInfoAccessExtension;
            astore 9 /* aiaExt */
        48: .line 559
      StackMap locals: sun.security.x509.AuthorityInfoAccessExtension
      StackMap stack:
            aload 9 /* aiaExt */
            ifnull 59
        49: .line 560
            aload 9 /* aiaExt */
            invokevirtual sun.security.x509.AuthorityInfoAccessExtension.getAccessDescriptions:()Ljava/util/List;
            astore 10 /* adList */
        start local 10 // java.util.List adList
        50: .line 561
            aload 10 /* adList */
            ifnull 59
        51: .line 562
            aload 10 /* adList */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 12
            goto 58
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters sun.security.x509.X509CertImpl sun.security.x509.AuthorityInfoAccessExtension java.util.List top java.util.Iterator
      StackMap stack:
        52: aload 12
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast sun.security.x509.AccessDescription
            astore 11 /* ad */
        start local 11 // sun.security.x509.AccessDescription ad
        53: .line 563
            aload 11 /* ad */
            invokestatic sun.security.provider.certpath.URICertStore.getInstance:(Lsun/security/x509/AccessDescription;)Ljava/security/cert/CertStore;
            astore 13 /* cs */
        start local 13 // java.security.cert.CertStore cs
        54: .line 564
            aload 13 /* cs */
            ifnull 58
        55: .line 565
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 57
        56: .line 566
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "adding AIAext CertStore"
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        57: .line 568
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters sun.security.x509.X509CertImpl sun.security.x509.AuthorityInfoAccessExtension java.util.List sun.security.x509.AccessDescription java.util.Iterator java.security.cert.CertStore
      StackMap stack:
            aload 7 /* builderParams */
            aload 13 /* cs */
            invokevirtual java.security.cert.PKIXBuilderParameters.addCertStore:(Ljava/security/cert/CertStore;)V
        end local 13 // java.security.cert.CertStore cs
        end local 11 // sun.security.x509.AccessDescription ad
        58: .line 562
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters sun.security.x509.X509CertImpl sun.security.x509.AuthorityInfoAccessExtension java.util.List top java.util.Iterator
      StackMap stack:
            aload 12
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 52
        end local 10 // java.util.List adList
        end local 9 // sun.security.x509.AuthorityInfoAccessExtension aiaExt
        end local 8 // sun.security.x509.X509CertImpl currCertImpl
        59: .line 575
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters
      StackMap stack:
            aconst_null
            astore 8 /* builder */
        start local 8 // java.security.cert.CertPathBuilder builder
        60: .line 577
            ldc "PKIX"
            invokestatic java.security.cert.CertPathBuilder.getInstance:(Ljava/lang/String;)Ljava/security/cert/CertPathBuilder;
            astore 8 /* builder */
        61: .line 578
            goto 64
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters java.security.cert.CertPathBuilder
      StackMap stack: java.security.NoSuchAlgorithmException
        62: astore 9 /* nsae */
        start local 9 // java.security.NoSuchAlgorithmException nsae
        63: .line 579
            new java.security.cert.CertPathValidatorException
            dup
            aload 9 /* nsae */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 9 // java.security.NoSuchAlgorithmException nsae
        64: .line 583
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 66
        65: .line 584
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "CrlRevocationChecker.buildToNewKey() about to try build ..."
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        66: .line 588
      StackMap locals:
      StackMap stack:
            aload 8 /* builder */
            aload 7 /* builderParams */
            invokevirtual java.security.cert.CertPathBuilder.build:(Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathBuilderResult;
            checkcast java.security.cert.PKIXCertPathBuilderResult
        67: .line 587
            astore 9 /* cpbr */
        start local 9 // java.security.cert.PKIXCertPathBuilderResult cpbr
        68: .line 590
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 70
        69: .line 591
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ldc "CrlRevocationChecker.buildToNewKey() about to check revocation ..."
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        70: .line 596
      StackMap locals: java.security.cert.PKIXCertPathBuilderResult
      StackMap stack:
            aload 3 /* stackedCerts */
            ifnonnull 72
        71: .line 597
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 3 /* stackedCerts */
        72: .line 599
      StackMap locals:
      StackMap stack:
            aload 3 /* stackedCerts */
            aload 1 /* currCert */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        73: .line 600
            aload 9 /* cpbr */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getTrustAnchor:()Ljava/security/cert/TrustAnchor;
            astore 10 /* ta */
        start local 10 // java.security.cert.TrustAnchor ta
        74: .line 601
            aload 10 /* ta */
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            astore 11 /* prevKey2 */
        start local 11 // java.security.PublicKey prevKey2
        75: .line 602
            aload 11 /* prevKey2 */
            ifnonnull 77
        76: .line 603
            aload 10 /* ta */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 11 /* prevKey2 */
        77: .line 605
      StackMap locals: java.security.cert.TrustAnchor java.security.PublicKey
      StackMap stack:
            iconst_1
            istore 12 /* signFlag */
        start local 12 // boolean signFlag
        78: .line 607
            aload 9 /* cpbr */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getCertPath:()Ljava/security/cert/CertPath;
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
        79: .line 606
            astore 13 /* cpList */
        start local 13 // java.util.List cpList
        80: .line 609
            aload 13 /* cpList */
            invokeinterface java.util.List.size:()I
            iconst_1
            isub
            istore 14 /* i */
        start local 14 // int i
        81: goto 93
        82: .line 610
      StackMap locals: int java.util.List int
      StackMap stack:
            aload 13 /* cpList */
            iload 14 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 15 /* cert */
        start local 15 // java.security.cert.X509Certificate cert
        83: .line 612
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 87
        84: .line 613
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.buildToNewKey() index "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        85: .line 614
            iload 14 /* i */
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            ldc " checking "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 15 /* cert */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        86: .line 613
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        87: .line 616
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 0 /* this */
            aload 15 /* cert */
            aload 11 /* prevKey2 */
            iload 12 /* signFlag */
            iconst_1
        88: .line 617
            aload 3 /* stackedCerts */
            aload 6 /* newAnchors */
        89: .line 616
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyRevocationStatus:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZLjava/util/Set;Ljava/util/Set;)V
        90: .line 618
            aload 15 /* cert */
            invokestatic sun.security.provider.certpath.CrlRevocationChecker.certCanSignCrl:(Ljava/security/cert/X509Certificate;)Z
            istore 12 /* signFlag */
        91: .line 619
            aload 15 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 11 /* prevKey2 */
        end local 15 // java.security.cert.X509Certificate cert
        92: .line 609
            iinc 14 /* i */ -1
      StackMap locals:
      StackMap stack:
        93: iload 14 /* i */
            ifge 82
        end local 14 // int i
        94: .line 621
            goto 98
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters java.security.cert.CertPathBuilder java.security.cert.PKIXCertPathBuilderResult java.security.cert.TrustAnchor java.security.PublicKey int java.util.List
      StackMap stack: java.security.cert.CertPathValidatorException
        95: pop
        96: .line 623
            aload 4 /* badKeys */
            aload 9 /* cpbr */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getPublicKey:()Ljava/security/PublicKey;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        97: .line 624
            goto 64
        98: .line 627
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 102
        99: .line 628
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CrlRevocationChecker.buildToNewKey() got key "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
       100: .line 629
            aload 9 /* cpbr */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getPublicKey:()Ljava/security/PublicKey;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
       101: .line 628
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
       102: .line 634
      StackMap locals:
      StackMap stack:
            aload 9 /* cpbr */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getPublicKey:()Ljava/security/PublicKey;
            astore 14 /* newKey */
        start local 14 // java.security.PublicKey newKey
       103: .line 636
            aload 0 /* this */
            aload 1 /* currCert */
            aload 14 /* newKey */
            iconst_1
            iconst_0
            invokevirtual sun.security.provider.certpath.CrlRevocationChecker.verifyRevocationStatus:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;ZZ)V
       104: .line 638
            return
       105: .line 639
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters java.security.cert.CertPathBuilder java.security.cert.PKIXCertPathBuilderResult java.security.cert.TrustAnchor java.security.PublicKey int java.util.List java.security.PublicKey
      StackMap stack: java.security.cert.CertPathValidatorException
            astore 15 /* cpve */
        start local 15 // java.security.cert.CertPathValidatorException cpve
       106: .line 641
            aload 15 /* cpve */
            instanceof sun.security.provider.certpath.CrlRevocationChecker$CertificateRevokedException
            ifeq 108
       107: .line 642
            aload 15 /* cpve */
            athrow
        end local 15 // java.security.cert.CertPathValidatorException cpve
       108: .line 647
      StackMap locals:
      StackMap stack:
            aload 4 /* badKeys */
            aload 14 /* newKey */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 14 // java.security.PublicKey newKey
        end local 13 // java.util.List cpList
        end local 12 // boolean signFlag
        end local 11 // java.security.PublicKey prevKey2
        end local 10 // java.security.cert.TrustAnchor ta
        end local 9 // java.security.cert.PKIXCertPathBuilderResult cpbr
       109: .line 648
            goto 64
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.security.cert.X509Certificate java.security.PublicKey java.util.Set java.util.Set java.security.cert.X509CertSelector java.util.Set java.security.cert.PKIXBuilderParameters java.security.cert.CertPathBuilder
      StackMap stack: java.security.InvalidAlgorithmParameterException
       110: astore 9 /* iape */
        start local 9 // java.security.InvalidAlgorithmParameterException iape
       111: .line 649
            new java.security.cert.CertPathValidatorException
            dup
            aload 9 /* iape */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 9 // java.security.InvalidAlgorithmParameterException iape
       112: .line 650
      StackMap locals:
      StackMap stack: java.security.cert.CertPathBuilderException
            astore 9 /* cpbe */
        start local 9 // java.security.cert.CertPathBuilderException cpbe
       113: .line 651
            new java.security.cert.CertPathValidatorException
            dup
       114: .line 652
            ldc "Could not determine revocation status"
            aload 9 /* cpbe */
       115: .line 651
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 9 // java.security.cert.CertPathBuilderException cpbe
        end local 8 // java.security.cert.CertPathBuilder builder
        end local 7 // java.security.cert.PKIXBuilderParameters builderParams
        end local 6 // java.util.Set newAnchors
        end local 5 // java.security.cert.X509CertSelector certSel
        end local 4 // java.util.Set badKeys
        end local 3 // java.util.Set stackedCerts
        end local 2 // java.security.PublicKey prevKey
        end local 1 // java.security.cert.X509Certificate currCert
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0  116     0           this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0  116     1       currCert  Ljava/security/cert/X509Certificate;
            0  116     2        prevKey  Ljava/security/PublicKey;
            0  116     3   stackedCerts  Ljava/util/Set<Ljava/security/cert/X509Certificate;>;
            3  116     4        badKeys  Ljava/util/Set<Ljava/security/PublicKey;>;
            6  116     5        certSel  Ljava/security/cert/X509CertSelector;
           11  116     6     newAnchors  Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;
           13   19     7  builderParams  Ljava/security/cert/PKIXBuilderParameters;
           20   21     7  builderParams  Ljava/security/cert/PKIXBuilderParameters;
           23  116     7  builderParams  Ljava/security/cert/PKIXBuilderParameters;
           18   19     8           iape  Ljava/security/InvalidAlgorithmParameterException;
           22   23     8           iape  Ljava/security/InvalidAlgorithmParameterException;
           38   59     8   currCertImpl  Lsun/security/x509/X509CertImpl;
           41   45     9             ce  Ljava/security/cert/CertificateException;
           46   59     9         aiaExt  Lsun/security/x509/AuthorityInfoAccessExtension;
           50   59    10         adList  Ljava/util/List<Lsun/security/x509/AccessDescription;>;
           53   58    11             ad  Lsun/security/x509/AccessDescription;
           54   58    13             cs  Ljava/security/cert/CertStore;
           60  116     8        builder  Ljava/security/cert/CertPathBuilder;
           63   64     9           nsae  Ljava/security/NoSuchAlgorithmException;
           68  109     9           cpbr  Ljava/security/cert/PKIXCertPathBuilderResult;
           74  109    10             ta  Ljava/security/cert/TrustAnchor;
           75  109    11       prevKey2  Ljava/security/PublicKey;
           78  109    12       signFlag  Z
           80  109    13         cpList  Ljava/util/List<+Ljava/security/cert/Certificate;>;
           81   94    14              i  I
           83   92    15           cert  Ljava/security/cert/X509Certificate;
          103  109    14         newKey  Ljava/security/PublicKey;
          106  108    15           cpve  Ljava/security/cert/CertPathValidatorException;
          111  112     9           iape  Ljava/security/InvalidAlgorithmParameterException;
          113  116     9           cpbe  Ljava/security/cert/CertPathBuilderException;
      Exception table:
        from    to  target  type
          15    16      17  Class java.security.InvalidAlgorithmParameterException
          19    20      21  Class java.security.InvalidAlgorithmParameterException
          38    39      40  Class java.security.cert.CertificateException
          60    61      62  Class java.security.NoSuchAlgorithmException
          80    94      95  Class java.security.cert.CertPathValidatorException
         103   104     105  Class java.security.cert.CertPathValidatorException
          64    97     110  Class java.security.InvalidAlgorithmParameterException
          98   104     110  Class java.security.InvalidAlgorithmParameterException
         105   109     110  Class java.security.InvalidAlgorithmParameterException
          64    97     112  Class java.security.cert.CertPathBuilderException
          98   104     112  Class java.security.cert.CertPathBuilderException
         105   109     112  Class java.security.cert.CertPathBuilderException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Set<Ljava/security/cert/X509Certificate;>;)V
    MethodParameters:
              Name  Flags
      currCert      
      prevKey       
      stackedCerts  

  private static java.lang.String reasonToString(int);
    descriptor: (I)Ljava/lang/String;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // int reasonCode
         0: .line 720
            iload 0 /* reasonCode */
            tableswitch { // 0 - 8
                    0: 1
                    1: 2
                    2: 3
                    3: 4
                    4: 5
                    5: 6
                    6: 7
                    7: 9
                    8: 8
              default: 9
          }
         1: .line 722
      StackMap locals:
      StackMap stack:
            ldc "unspecified"
            areturn
         2: .line 724
      StackMap locals:
      StackMap stack:
            ldc "key compromise"
            areturn
         3: .line 726
      StackMap locals:
      StackMap stack:
            ldc "CA compromise"
            areturn
         4: .line 728
      StackMap locals:
      StackMap stack:
            ldc "affiliation changed"
            areturn
         5: .line 730
      StackMap locals:
      StackMap stack:
            ldc "superseded"
            areturn
         6: .line 732
      StackMap locals:
      StackMap stack:
            ldc "cessation of operation"
            areturn
         7: .line 734
      StackMap locals:
      StackMap stack:
            ldc "certificate hold"
            areturn
         8: .line 736
      StackMap locals:
      StackMap stack:
            ldc "remove from CRL"
            areturn
         9: .line 738
      StackMap locals:
      StackMap stack:
            ldc "unrecognized reason code"
            areturn
        end local 0 // int reasonCode
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   10     0  reasonCode  I
    MethodParameters:
            Name  Flags
      reasonCode  

  private java.util.Collection<java.security.cert.X509CRL> verifyPossibleCRLs(java.util.Set<java.security.cert.X509CRL>, java.security.cert.X509Certificate, boolean, java.security.PublicKey, boolean[], java.util.Set<java.security.cert.TrustAnchor>);
    descriptor: (Ljava/util/Set;Ljava/security/cert/X509Certificate;ZLjava/security/PublicKey;[ZLjava/util/Set;)Ljava/util/Collection;
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=11, locals=16, args_size=7
        start local 0 // sun.security.provider.certpath.CrlRevocationChecker this
        start local 1 // java.util.Set crls
        start local 2 // java.security.cert.X509Certificate cert
        start local 3 // boolean signFlag
        start local 4 // java.security.PublicKey prevKey
        start local 5 // boolean[] reasonsMask
        start local 6 // java.util.Set trustAnchors
         0: .line 760
            aload 2 /* cert */
            invokestatic sun.security.x509.X509CertImpl.toImpl:(Ljava/security/cert/X509Certificate;)Lsun/security/x509/X509CertImpl;
            astore 7 /* certImpl */
        start local 7 // sun.security.x509.X509CertImpl certImpl
         1: .line 761
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 5
         2: .line 762
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "CRLRevocationChecker.verifyPossibleCRLs: Checking CRLDPs for "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         3: .line 764
            aload 7 /* certImpl */
            invokevirtual sun.security.x509.X509CertImpl.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         4: .line 762
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         5: .line 767
      StackMap locals: sun.security.x509.X509CertImpl
      StackMap stack:
            aload 7 /* certImpl */
            invokevirtual sun.security.x509.X509CertImpl.getCRLDistributionPointsExtension:()Lsun/security/x509/CRLDistributionPointsExtension;
         6: .line 766
            astore 8 /* ext */
        start local 8 // sun.security.x509.CRLDistributionPointsExtension ext
         7: .line 768
            aconst_null
            astore 9 /* points */
        start local 9 // java.util.List points
         8: .line 769
            aload 8 /* ext */
            ifnonnull 16
         9: .line 773
            aload 7 /* certImpl */
            invokevirtual sun.security.x509.X509CertImpl.getIssuerDN:()Ljava/security/Principal;
            checkcast sun.security.x509.X500Name
            astore 10 /* certIssuer */
        start local 10 // sun.security.x509.X500Name certIssuer
        10: .line 774
            new sun.security.x509.DistributionPoint
            dup
        11: .line 775
            new sun.security.x509.GeneralNames
            dup
            invokespecial sun.security.x509.GeneralNames.<init>:()V
            new sun.security.x509.GeneralName
            dup
            aload 10 /* certIssuer */
            invokespecial sun.security.x509.GeneralName.<init>:(Lsun/security/x509/GeneralNameInterface;)V
            invokevirtual sun.security.x509.GeneralNames.add:(Lsun/security/x509/GeneralName;)Lsun/security/x509/GeneralNames;
        12: .line 776
            aconst_null
            aconst_null
        13: .line 774
            invokespecial sun.security.x509.DistributionPoint.<init>:(Lsun/security/x509/GeneralNames;[ZLsun/security/x509/GeneralNames;)V
            astore 11 /* point */
        start local 11 // sun.security.x509.DistributionPoint point
        14: .line 777
            aload 11 /* point */
            invokestatic java.util.Collections.singletonList:(Ljava/lang/Object;)Ljava/util/List;
            astore 9 /* points */
        end local 11 // sun.security.x509.DistributionPoint point
        end local 10 // sun.security.x509.X500Name certIssuer
        15: .line 778
            goto 17
        16: .line 779
      StackMap locals: sun.security.x509.CRLDistributionPointsExtension java.util.List
      StackMap stack:
            aload 8 /* ext */
            ldc "points"
            invokevirtual sun.security.x509.CRLDistributionPointsExtension.get:(Ljava/lang/String;)Ljava/util/List;
            astore 9 /* points */
        17: .line 781
      StackMap locals:
      StackMap stack:
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 10 /* results */
        start local 10 // java.util.Set results
        18: .line 782
            aload 9 /* points */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 11 /* t */
        start local 11 // java.util.Iterator t
        19: .line 783
            goto 33
        20: .line 784
      StackMap locals: java.util.Set java.util.Iterator
      StackMap stack:
            aload 11 /* t */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast sun.security.x509.DistributionPoint
            astore 12 /* point */
        start local 12 // sun.security.x509.DistributionPoint point
        21: .line 785
            aload 1 /* crls */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 14
            goto 32
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.util.Set java.security.cert.X509Certificate int java.security.PublicKey boolean[] java.util.Set sun.security.x509.X509CertImpl sun.security.x509.CRLDistributionPointsExtension java.util.List java.util.Set java.util.Iterator sun.security.x509.DistributionPoint top java.util.Iterator
      StackMap stack:
        22: aload 14
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 13 /* crl */
        start local 13 // java.security.cert.X509CRL crl
        23: .line 786
            aconst_null
            astore 15 /* variant */
        start local 15 // java.lang.String variant
        24: .line 787
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            instanceof sun.security.provider.certpath.PKIXExtendedParameters
            ifeq 26
        25: .line 788
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            checkcast sun.security.provider.certpath.PKIXExtendedParameters
            invokevirtual sun.security.provider.certpath.PKIXExtendedParameters.getVariant:()Ljava/lang/String;
            astore 15 /* variant */
        26: .line 790
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.util.Set java.security.cert.X509Certificate int java.security.PublicKey boolean[] java.util.Set sun.security.x509.X509CertImpl sun.security.x509.CRLDistributionPointsExtension java.util.List java.util.Set java.util.Iterator sun.security.x509.DistributionPoint java.security.cert.X509CRL java.util.Iterator java.lang.String
      StackMap stack:
            aload 7 /* certImpl */
            aload 12 /* point */
            aload 13 /* crl */
        27: .line 791
            aload 5 /* reasonsMask */
            iload 3 /* signFlag */
            aload 4 /* prevKey */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mSigProvider:Ljava/lang/String;
        28: .line 792
            aload 6 /* trustAnchors */
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mStores:Ljava/util/List;
            aload 0 /* this */
            getfield sun.security.provider.certpath.CrlRevocationChecker.mParams:Ljava/security/cert/PKIXParameters;
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            aload 15 /* variant */
        29: .line 790
            invokestatic sun.security.provider.certpath.DistributionPointFetcher.verifyCRL:(Lsun/security/x509/X509CertImpl;Lsun/security/x509/DistributionPoint;Ljava/security/cert/X509CRL;[ZZLjava/security/PublicKey;Ljava/lang/String;Ljava/util/Set;Ljava/util/List;Ljava/util/Date;Ljava/lang/String;)Z
        30: .line 792
            ifeq 32
        31: .line 793
            aload 10 /* results */
            aload 13 /* crl */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 15 // java.lang.String variant
        end local 13 // java.security.cert.X509CRL crl
        32: .line 785
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.util.Set java.security.cert.X509Certificate int java.security.PublicKey boolean[] java.util.Set sun.security.x509.X509CertImpl sun.security.x509.CRLDistributionPointsExtension java.util.List java.util.Set java.util.Iterator sun.security.x509.DistributionPoint top java.util.Iterator
      StackMap stack:
            aload 14
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 22
        end local 12 // sun.security.x509.DistributionPoint point
        33: .line 783
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.util.Set java.security.cert.X509Certificate int java.security.PublicKey boolean[] java.util.Set sun.security.x509.X509CertImpl sun.security.x509.CRLDistributionPointsExtension java.util.List java.util.Set java.util.Iterator
      StackMap stack:
            aload 11 /* t */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifeq 34
            aload 5 /* reasonsMask */
            getstatic sun.security.provider.certpath.CrlRevocationChecker.ALL_REASONS:[Z
            invokestatic java.util.Arrays.equals:([Z[Z)Z
            ifeq 20
        end local 11 // java.util.Iterator t
        34: .line 797
      StackMap locals:
      StackMap stack:
            aload 10 /* results */
        35: areturn
        end local 10 // java.util.Set results
        end local 9 // java.util.List points
        end local 8 // sun.security.x509.CRLDistributionPointsExtension ext
        end local 7 // sun.security.x509.X509CertImpl certImpl
        36: .line 798
      StackMap locals: sun.security.provider.certpath.CrlRevocationChecker java.util.Set java.security.cert.X509Certificate int java.security.PublicKey boolean[] java.util.Set
      StackMap stack: java.lang.Exception
            astore 7 /* e */
        start local 7 // java.lang.Exception e
        37: .line 799
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            ifnull 40
        38: .line 800
            getstatic sun.security.provider.certpath.CrlRevocationChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "Exception while verifying CRL: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 7 /* e */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        39: .line 801
            aload 7 /* e */
            invokevirtual java.lang.Exception.printStackTrace:()V
        40: .line 803
      StackMap locals: java.lang.Exception
      StackMap stack:
            invokestatic java.util.Collections.emptySet:()Ljava/util/Set;
            areturn
        end local 7 // java.lang.Exception e
        end local 6 // java.util.Set trustAnchors
        end local 5 // boolean[] reasonsMask
        end local 4 // java.security.PublicKey prevKey
        end local 3 // boolean signFlag
        end local 2 // java.security.cert.X509Certificate cert
        end local 1 // java.util.Set crls
        end local 0 // sun.security.provider.certpath.CrlRevocationChecker this
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   41     0          this  Lsun/security/provider/certpath/CrlRevocationChecker;
            0   41     1          crls  Ljava/util/Set<Ljava/security/cert/X509CRL;>;
            0   41     2          cert  Ljava/security/cert/X509Certificate;
            0   41     3      signFlag  Z
            0   41     4       prevKey  Ljava/security/PublicKey;
            0   41     5   reasonsMask  [Z
            0   41     6  trustAnchors  Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;
            1   36     7      certImpl  Lsun/security/x509/X509CertImpl;
            7   36     8           ext  Lsun/security/x509/CRLDistributionPointsExtension;
            8   36     9        points  Ljava/util/List<Lsun/security/x509/DistributionPoint;>;
           10   15    10    certIssuer  Lsun/security/x509/X500Name;
           14   15    11         point  Lsun/security/x509/DistributionPoint;
           18   36    10       results  Ljava/util/Set<Ljava/security/cert/X509CRL;>;
           19   34    11             t  Ljava/util/Iterator<Lsun/security/x509/DistributionPoint;>;
           21   33    12         point  Lsun/security/x509/DistributionPoint;
           23   32    13           crl  Ljava/security/cert/X509CRL;
           24   32    15       variant  Ljava/lang/String;
           37   41     7             e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0    35      36  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/util/Set<Ljava/security/cert/X509CRL;>;Ljava/security/cert/X509Certificate;ZLjava/security/PublicKey;[ZLjava/util/Set<Ljava/security/cert/TrustAnchor;>;)Ljava/util/Collection<Ljava/security/cert/X509CRL;>;
    MethodParameters:
              Name  Flags
      crls          
      cert          
      signFlag      
      prevKey       
      reasonsMask   
      trustAnchors  
}
SourceFile: "CrlRevocationChecker.java"
NestMembers:
  sun.security.provider.certpath.CrlRevocationChecker$CertificateRevokedException  sun.security.provider.certpath.CrlRevocationChecker$RejectKeySelector
InnerClasses:
  private CertificateRevokedException = sun.security.provider.certpath.CrlRevocationChecker$CertificateRevokedException of sun.security.provider.certpath.CrlRevocationChecker
  private RejectKeySelector = sun.security.provider.certpath.CrlRevocationChecker$RejectKeySelector of sun.security.provider.certpath.CrlRevocationChecker