class sun.security.provider.certpath.KeyChecker extends java.security.cert.PKIXCertPathChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: sun.security.provider.certpath.KeyChecker
  super_class: java.security.cert.PKIXCertPathChecker
{
  private static final sun.security.util.Debug debug;
    descriptor: Lsun/security/util/Debug;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final int keyCertSign;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 5

  private final int certPathLen;
    descriptor: I
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private java.security.cert.CertSelector targetConstraints;
    descriptor: Ljava/security/cert/CertSelector;
    flags: (0x0002) ACC_PRIVATE

  private int remainingCerts;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private static java.util.Set<java.lang.String> supportedExts;
    descriptor: Ljava/util/Set;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Signature: Ljava/util/Set<Ljava/lang/String;>;

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=1, locals=0, args_size=0
         0: .line 46
            ldc "certpath"
            invokestatic sun.security.util.Debug.getInstance:(Ljava/lang/String;)Lsun/security/util/Debug;
            putstatic sun.security.provider.certpath.KeyChecker.debug:Lsun/security/util/Debug;
         1: .line 53
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  void <init>(int, java.security.cert.CertSelector);
    descriptor: (ILjava/security/cert/CertSelector;)V
    flags: (0x0000) 
    Code:
      stack=2, locals=3, args_size=3
        start local 0 // sun.security.provider.certpath.KeyChecker this
        start local 1 // int certPathLen
        start local 2 // java.security.cert.CertSelector targetCertSel
         0: .line 62
            aload 0 /* this */
            invokespecial java.security.cert.PKIXCertPathChecker.<init>:()V
         1: .line 65
            aload 0 /* this */
            iload 1 /* certPathLen */
            putfield sun.security.provider.certpath.KeyChecker.certPathLen:I
         2: .line 66
            aload 0 /* this */
            aload 2 /* targetCertSel */
            putfield sun.security.provider.certpath.KeyChecker.targetConstraints:Ljava/security/cert/CertSelector;
         3: .line 67
            aload 0 /* this */
            iconst_0
            invokevirtual sun.security.provider.certpath.KeyChecker.init:(Z)V
         4: .line 68
            return
        end local 2 // java.security.cert.CertSelector targetCertSel
        end local 1 // int certPathLen
        end local 0 // sun.security.provider.certpath.KeyChecker this
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0    5     0           this  Lsun/security/provider/certpath/KeyChecker;
            0    5     1    certPathLen  I
            0    5     2  targetCertSel  Ljava/security/cert/CertSelector;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
               Name  Flags
      certPathLen    
      targetCertSel  

  public void init(boolean);
    descriptor: (Z)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // sun.security.provider.certpath.KeyChecker this
        start local 1 // boolean forward
         0: .line 75
            iload 1 /* forward */
            ifne 3
         1: .line 76
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.provider.certpath.KeyChecker.certPathLen:I
            putfield sun.security.provider.certpath.KeyChecker.remainingCerts:I
         2: .line 77
            goto 4
         3: .line 78
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertPathValidatorException
            dup
            ldc "forward checking not supported"
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
         4: .line 80
      StackMap locals:
      StackMap stack:
            return
        end local 1 // boolean forward
        end local 0 // sun.security.provider.certpath.KeyChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    5     0     this  Lsun/security/provider/certpath/KeyChecker;
            0    5     1  forward  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
         Name  Flags
      forward  

  public boolean isForwardCheckingSupported();
    descriptor: ()Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.KeyChecker this
         0: .line 83
            iconst_0
            ireturn
        end local 0 // sun.security.provider.certpath.KeyChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/provider/certpath/KeyChecker;

  public java.util.Set<java.lang.String> getSupportedExtensions();
    descriptor: ()Ljava/util/Set;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // sun.security.provider.certpath.KeyChecker this
         0: .line 87
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            ifnonnull 6
         1: .line 88
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
         2: .line 89
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.KeyUsage_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         3: .line 90
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.ExtendedKeyUsage_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         4: .line 91
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            getstatic sun.security.x509.PKIXExtensions.SubjectAlternativeName_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         5: .line 92
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            invokestatic java.util.Collections.unmodifiableSet:(Ljava/util/Set;)Ljava/util/Set;
            putstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
         6: .line 94
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.KeyChecker.supportedExts:Ljava/util/Set;
            areturn
        end local 0 // sun.security.provider.certpath.KeyChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    7     0  this  Lsun/security/provider/certpath/KeyChecker;
    Signature: ()Ljava/util/Set<Ljava/lang/String;>;

  public void check(java.security.cert.Certificate, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=4, args_size=3
        start local 0 // sun.security.provider.certpath.KeyChecker this
        start local 1 // java.security.cert.Certificate cert
        start local 2 // java.util.Collection unresCritExts
         0: .line 109
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 3 /* currCert */
        start local 3 // java.security.cert.X509Certificate currCert
         1: .line 111
            aload 0 /* this */
            dup
            getfield sun.security.provider.certpath.KeyChecker.remainingCerts:I
            iconst_1
            isub
            putfield sun.security.provider.certpath.KeyChecker.remainingCerts:I
         2: .line 114
            aload 0 /* this */
            getfield sun.security.provider.certpath.KeyChecker.remainingCerts:I
            ifne 6
         3: .line 115
            aload 0 /* this */
            getfield sun.security.provider.certpath.KeyChecker.targetConstraints:Ljava/security/cert/CertSelector;
            ifnull 7
         4: .line 116
            aload 0 /* this */
            getfield sun.security.provider.certpath.KeyChecker.targetConstraints:Ljava/security/cert/CertSelector;
            aload 3 /* currCert */
            invokeinterface java.security.cert.CertSelector.match:(Ljava/security/cert/Certificate;)Z
            ifne 7
         5: .line 117
            new java.security.cert.CertPathValidatorException
            dup
            ldc "target certificate constraints check failed"
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
         6: .line 122
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 3 /* currCert */
            invokestatic sun.security.provider.certpath.KeyChecker.verifyCAKeyUsage:(Ljava/security/cert/X509Certificate;)V
         7: .line 126
      StackMap locals:
      StackMap stack:
            aload 2 /* unresCritExts */
            ifnull 13
            aload 2 /* unresCritExts */
            invokeinterface java.util.Collection.isEmpty:()Z
            ifne 13
         8: .line 127
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.KeyUsage_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
         9: .line 128
            aload 2 /* unresCritExts */
            getstatic sun.security.x509.PKIXExtensions.ExtendedKeyUsage_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
        10: .line 129
            aload 2 /* unresCritExts */
        11: .line 130
            getstatic sun.security.x509.PKIXExtensions.SubjectAlternativeName_Id:Lsun/security/util/ObjectIdentifier;
            invokevirtual sun.security.util.ObjectIdentifier.toString:()Ljava/lang/String;
        12: .line 129
            invokeinterface java.util.Collection.remove:(Ljava/lang/Object;)Z
            pop
        13: .line 132
      StackMap locals:
      StackMap stack:
            return
        end local 3 // java.security.cert.X509Certificate currCert
        end local 2 // java.util.Collection unresCritExts
        end local 1 // java.security.cert.Certificate cert
        end local 0 // sun.security.provider.certpath.KeyChecker this
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   14     0           this  Lsun/security/provider/certpath/KeyChecker;
            0   14     1           cert  Ljava/security/cert/Certificate;
            0   14     2  unresCritExts  Ljava/util/Collection<Ljava/lang/String;>;
            1   14     3       currCert  Ljava/security/cert/X509Certificate;
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/Certificate;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
               Name  Flags
      cert           
      unresCritExts  

  static void verifyCAKeyUsage(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=5, locals=3, args_size=1
        start local 0 // java.security.cert.X509Certificate cert
         0: .line 142
            ldc "CA key usage"
            astore 1 /* msg */
        start local 1 // java.lang.String msg
         1: .line 143
            getstatic sun.security.provider.certpath.KeyChecker.debug:Lsun/security/util/Debug;
            ifnull 5
         2: .line 144
            getstatic sun.security.provider.certpath.KeyChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "KeyChecker.verifyCAKeyUsage() ---checking "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
         3: .line 145
            ldc "..."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
         4: .line 144
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
         5: .line 148
      StackMap locals: java.lang.String
      StackMap stack:
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getKeyUsage:()[Z
            astore 2 /* keyUsageBits */
        start local 2 // boolean[] keyUsageBits
         6: .line 152
            aload 2 /* keyUsageBits */
            ifnonnull 8
         7: .line 153
            return
         8: .line 157
      StackMap locals: boolean[]
      StackMap stack:
            aload 2 /* keyUsageBits */
            iconst_5
            baload
            ifne 12
         9: .line 158
            new java.security.cert.CertPathValidatorException
            dup
            new java.lang.StringBuilder
            dup
            aload 1 /* msg */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc " check failed: "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        10: .line 159
            ldc "keyCertSign bit is not set"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        11: .line 158
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        12: .line 162
      StackMap locals:
      StackMap stack:
            getstatic sun.security.provider.certpath.KeyChecker.debug:Lsun/security/util/Debug;
            ifnull 16
        13: .line 163
            getstatic sun.security.provider.certpath.KeyChecker.debug:Lsun/security/util/Debug;
            new java.lang.StringBuilder
            dup
            ldc "KeyChecker.verifyCAKeyUsage() "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 1 /* msg */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        14: .line 164
            ldc " verified."
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        15: .line 163
            invokevirtual sun.security.util.Debug.println:(Ljava/lang/String;)V
        16: .line 166
      StackMap locals:
      StackMap stack:
            return
        end local 2 // boolean[] keyUsageBits
        end local 1 // java.lang.String msg
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   17     0          cert  Ljava/security/cert/X509Certificate;
            1   17     1           msg  Ljava/lang/String;
            6   17     2  keyUsageBits  [Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
      Name  Flags
      cert  
}
SourceFile: "KeyChecker.java"