public final class sun.security.validator.PKIXValidator extends sun.security.validator.Validator
  minor version: 0
  major version: 59
  flags: flags: (0x0031) ACC_PUBLIC, ACC_FINAL, ACC_SUPER
  this_class: sun.security.validator.PKIXValidator
  super_class: sun.security.validator.Validator
{
  private static final boolean checkTLSRevocation;
    descriptor: Z
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final boolean TRY_VALIDATOR;
    descriptor: Z
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 1

  private static final boolean ALLOW_NON_CA_ANCHOR;
    descriptor: Z
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private final java.util.Set<java.security.cert.X509Certificate> trustedCerts;
    descriptor: Ljava/util/Set;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/Set<Ljava/security/cert/X509Certificate;>;

  private final java.security.cert.PKIXBuilderParameters parameterTemplate;
    descriptor: Ljava/security/cert/PKIXBuilderParameters;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private int certPathLength;
    descriptor: I
    flags: (0x0002) ACC_PRIVATE

  private final java.util.Map<javax.security.auth.x500.X500Principal, java.util.List<java.security.PublicKey>> trustedSubjects;
    descriptor: Ljava/util/Map;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/Map<Ljavax/security/auth/x500/X500Principal;Ljava/util/List<Ljava/security/PublicKey;>;>;

  private final java.security.cert.CertificateFactory factory;
    descriptor: Ljava/security/cert/CertificateFactory;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final boolean plugin;
    descriptor: Z
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=3, locals=0, args_size=0
         0: .line 63
            new sun.security.action.GetBooleanAction
            dup
            ldc "com.sun.net.ssl.checkRevocation"
            invokespecial sun.security.action.GetBooleanAction.<init>:(Ljava/lang/String;)V
         1: .line 62
            invokestatic java.security.AccessController.doPrivileged:(Ljava/security/PrivilegedAction;)Ljava/lang/Object;
            checkcast java.lang.Boolean
            invokevirtual java.lang.Boolean.booleanValue:()Z
         2: .line 61
            putstatic sun.security.validator.PKIXValidator.checkTLSRevocation:Z
         3: .line 73
            invokestatic sun.security.validator.PKIXValidator.allowNonCaAnchor:()Z
            putstatic sun.security.validator.PKIXValidator.ALLOW_NON_CA_ANCHOR:Z
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  private static boolean allowNonCaAnchor();
    descriptor: ()Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=0
         0: .line 76
            ldc "jdk.security.allowNonCaAnchor"
            invokestatic sun.security.action.GetPropertyAction.privilegedGetProperty:(Ljava/lang/String;)Ljava/lang/String;
         1: .line 75
            astore 0 /* prop */
        start local 0 // java.lang.String prop
         2: .line 77
            aload 0 /* prop */
            ifnull 4
            aload 0 /* prop */
            invokevirtual java.lang.String.isEmpty:()Z
            ifne 3
            aload 0 /* prop */
            ldc "true"
            invokevirtual java.lang.String.equalsIgnoreCase:(Ljava/lang/String;)Z
            ifeq 4
      StackMap locals: java.lang.String
      StackMap stack:
         3: iconst_1
            ireturn
      StackMap locals:
      StackMap stack:
         4: iconst_0
            ireturn
        end local 0 // java.lang.String prop
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            2    5     0  prop  Ljava/lang/String;

  void <init>(java.lang.String, java.util.Collection<java.security.cert.X509Certificate>);
    descriptor: (Ljava/lang/String;Ljava/util/Collection;)V
    flags: (0x0000) 
    Code:
      stack=5, locals=8, args_size=3
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.lang.String variant
        start local 2 // java.util.Collection trustedCerts
         0: .line 91
            aload 0 /* this */
            ldc "PKIX"
            aload 1 /* variant */
            invokespecial sun.security.validator.Validator.<init>:(Ljava/lang/String;Ljava/lang/String;)V
         1: .line 82
            aload 0 /* this */
            iconst_m1
            putfield sun.security.validator.PKIXValidator.certPathLength:I
         2: .line 92
            aload 2 /* trustedCerts */
            instanceof java.util.Set
            ifeq 5
         3: .line 93
            aload 0 /* this */
            aload 2 /* trustedCerts */
            checkcast java.util.Set
            putfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
         4: .line 94
            goto 6
         5: .line 95
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection
      StackMap stack:
            aload 0 /* this */
            new java.util.HashSet
            dup
            aload 2 /* trustedCerts */
            invokespecial java.util.HashSet.<init>:(Ljava/util/Collection;)V
            putfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
         6: .line 97
      StackMap locals:
      StackMap stack:
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 3 /* trustAnchors */
        start local 3 // java.util.Set trustAnchors
         7: .line 98
            aload 2 /* trustedCerts */
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 5
            goto 10
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set top java.util.Iterator
      StackMap stack:
         8: aload 5
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 4 /* cert */
        start local 4 // java.security.cert.X509Certificate cert
         9: .line 99
            aload 3 /* trustAnchors */
            new java.security.cert.TrustAnchor
            dup
            aload 4 /* cert */
            aconst_null
            invokespecial java.security.cert.TrustAnchor.<init>:(Ljava/security/cert/X509Certificate;[B)V
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 4 // java.security.cert.X509Certificate cert
        10: .line 98
      StackMap locals:
      StackMap stack:
            aload 5
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 8
        11: .line 102
            aload 0 /* this */
            new java.security.cert.PKIXBuilderParameters
            dup
            aload 3 /* trustAnchors */
            aconst_null
            invokespecial java.security.cert.PKIXBuilderParameters.<init>:(Ljava/util/Set;Ljava/security/cert/CertSelector;)V
            putfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
        12: .line 103
            goto 15
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set
      StackMap stack: java.security.InvalidAlgorithmParameterException
        13: astore 4 /* e */
        start local 4 // java.security.InvalidAlgorithmParameterException e
        14: .line 104
            new java.lang.RuntimeException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Unexpected error: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 4 /* e */
            invokevirtual java.security.InvalidAlgorithmParameterException.toString:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 4 /* e */
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.security.InvalidAlgorithmParameterException e
        15: .line 106
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* variant */
            invokevirtual sun.security.validator.PKIXValidator.setDefaultParameters:(Ljava/lang/String;)V
        16: .line 113
            aload 0 /* this */
            new java.util.HashMap
            dup
            invokespecial java.util.HashMap.<init>:()V
            putfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
        17: .line 114
            aload 2 /* trustedCerts */
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 5
            goto 26
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set top java.util.Iterator
      StackMap stack:
        18: aload 5
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 4 /* cert */
        start local 4 // java.security.cert.X509Certificate cert
        19: .line 115
            aload 4 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 6 /* dn */
        start local 6 // javax.security.auth.x500.X500Principal dn
        20: .line 117
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 6 /* dn */
            invokeinterface java.util.Map.containsKey:(Ljava/lang/Object;)Z
            ifeq 23
        21: .line 118
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 6 /* dn */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.List
            astore 7 /* keys */
        start local 7 // java.util.List keys
        22: .line 119
            goto 25
        end local 7 // java.util.List keys
        23: .line 120
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set java.security.cert.X509Certificate java.util.Iterator javax.security.auth.x500.X500Principal
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 7 /* keys */
        start local 7 // java.util.List keys
        24: .line 121
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 6 /* dn */
            aload 7 /* keys */
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        25: .line 123
      StackMap locals: java.util.List
      StackMap stack:
            aload 7 /* keys */
            aload 4 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 7 // java.util.List keys
        end local 6 // javax.security.auth.x500.X500Principal dn
        end local 4 // java.security.cert.X509Certificate cert
        26: .line 114
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set top java.util.Iterator
      StackMap stack:
            aload 5
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 18
        27: .line 126
            aload 0 /* this */
            ldc "X.509"
            invokestatic java.security.cert.CertificateFactory.getInstance:(Ljava/lang/String;)Ljava/security/cert/CertificateFactory;
            putfield sun.security.validator.PKIXValidator.factory:Ljava/security/cert/CertificateFactory;
        28: .line 127
            goto 31
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.util.Collection java.util.Set
      StackMap stack: java.security.cert.CertificateException
        29: astore 4 /* e */
        start local 4 // java.security.cert.CertificateException e
        30: .line 128
            new java.lang.RuntimeException
            dup
            ldc "Internal error"
            aload 4 /* e */
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.security.cert.CertificateException e
        31: .line 130
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* variant */
            ldc "plugin code signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            putfield sun.security.validator.PKIXValidator.plugin:Z
        32: .line 134
            return
        end local 3 // java.util.Set trustAnchors
        end local 2 // java.util.Collection trustedCerts
        end local 1 // java.lang.String variant
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   33     0          this  Lsun/security/validator/PKIXValidator;
            0   33     1       variant  Ljava/lang/String;
            0   33     2  trustedCerts  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
            7   33     3  trustAnchors  Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;
            9   10     4          cert  Ljava/security/cert/X509Certificate;
           14   15     4             e  Ljava/security/InvalidAlgorithmParameterException;
           19   26     4          cert  Ljava/security/cert/X509Certificate;
           20   26     6            dn  Ljavax/security/auth/x500/X500Principal;
           22   23     7          keys  Ljava/util/List<Ljava/security/PublicKey;>;
           24   26     7          keys  Ljava/util/List<Ljava/security/PublicKey;>;
           30   31     4             e  Ljava/security/cert/CertificateException;
      Exception table:
        from    to  target  type
          11    12      13  Class java.security.InvalidAlgorithmParameterException
          27    28      29  Class java.security.cert.CertificateException
    Signature: (Ljava/lang/String;Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;)V
    MethodParameters:
              Name  Flags
      variant       
      trustedCerts  

  void <init>(java.lang.String, java.security.cert.PKIXBuilderParameters);
    descriptor: (Ljava/lang/String;Ljava/security/cert/PKIXBuilderParameters;)V
    flags: (0x0000) 
    Code:
      stack=4, locals=7, args_size=3
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.lang.String variant
        start local 2 // java.security.cert.PKIXBuilderParameters params
         0: .line 137
            aload 0 /* this */
            ldc "PKIX"
            aload 1 /* variant */
            invokespecial sun.security.validator.Validator.<init>:(Ljava/lang/String;Ljava/lang/String;)V
         1: .line 82
            aload 0 /* this */
            iconst_m1
            putfield sun.security.validator.PKIXValidator.certPathLength:I
         2: .line 138
            aload 0 /* this */
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            putfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
         3: .line 139
            aload 2 /* params */
            invokevirtual java.security.cert.PKIXBuilderParameters.getTrustAnchors:()Ljava/util/Set;
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 4
            goto 8
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.security.cert.PKIXBuilderParameters top java.util.Iterator
      StackMap stack:
         4: aload 4
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 3 /* anchor */
        start local 3 // java.security.cert.TrustAnchor anchor
         5: .line 140
            aload 3 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            astore 5 /* cert */
        start local 5 // java.security.cert.X509Certificate cert
         6: .line 141
            aload 5 /* cert */
            ifnull 8
         7: .line 142
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
            aload 5 /* cert */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 5 // java.security.cert.X509Certificate cert
        end local 3 // java.security.cert.TrustAnchor anchor
         8: .line 139
      StackMap locals:
      StackMap stack:
            aload 4
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 4
         9: .line 145
            aload 0 /* this */
            aload 2 /* params */
            putfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
        10: .line 152
            aload 0 /* this */
            new java.util.HashMap
            dup
            invokespecial java.util.HashMap.<init>:()V
            putfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
        11: .line 153
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 4
            goto 20
      StackMap locals:
      StackMap stack:
        12: aload 4
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 3 /* cert */
        start local 3 // java.security.cert.X509Certificate cert
        13: .line 154
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 5 /* dn */
        start local 5 // javax.security.auth.x500.X500Principal dn
        14: .line 156
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 5 /* dn */
            invokeinterface java.util.Map.containsKey:(Ljava/lang/Object;)Z
            ifeq 17
        15: .line 157
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 5 /* dn */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.List
            astore 6 /* keys */
        start local 6 // java.util.List keys
        16: .line 158
            goto 19
        end local 6 // java.util.List keys
        17: .line 159
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.security.cert.PKIXBuilderParameters java.security.cert.X509Certificate java.util.Iterator javax.security.auth.x500.X500Principal
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 6 /* keys */
        start local 6 // java.util.List keys
        18: .line 160
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 5 /* dn */
            aload 6 /* keys */
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        19: .line 162
      StackMap locals: java.util.List
      StackMap stack:
            aload 6 /* keys */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 6 // java.util.List keys
        end local 5 // javax.security.auth.x500.X500Principal dn
        end local 3 // java.security.cert.X509Certificate cert
        20: .line 153
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.security.cert.PKIXBuilderParameters top java.util.Iterator
      StackMap stack:
            aload 4
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 12
        21: .line 165
            aload 0 /* this */
            ldc "X.509"
            invokestatic java.security.cert.CertificateFactory.getInstance:(Ljava/lang/String;)Ljava/security/cert/CertificateFactory;
            putfield sun.security.validator.PKIXValidator.factory:Ljava/security/cert/CertificateFactory;
        22: .line 166
            goto 25
      StackMap locals: sun.security.validator.PKIXValidator java.lang.String java.security.cert.PKIXBuilderParameters
      StackMap stack: java.security.cert.CertificateException
        23: astore 3 /* e */
        start local 3 // java.security.cert.CertificateException e
        24: .line 167
            new java.lang.RuntimeException
            dup
            ldc "Internal error"
            aload 3 /* e */
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.security.cert.CertificateException e
        25: .line 169
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* variant */
            ldc "plugin code signing"
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            putfield sun.security.validator.PKIXValidator.plugin:Z
        26: .line 173
            return
        end local 2 // java.security.cert.PKIXBuilderParameters params
        end local 1 // java.lang.String variant
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0   27     0     this  Lsun/security/validator/PKIXValidator;
            0   27     1  variant  Ljava/lang/String;
            0   27     2   params  Ljava/security/cert/PKIXBuilderParameters;
            5    8     3   anchor  Ljava/security/cert/TrustAnchor;
            6    8     5     cert  Ljava/security/cert/X509Certificate;
           13   20     3     cert  Ljava/security/cert/X509Certificate;
           14   20     5       dn  Ljavax/security/auth/x500/X500Principal;
           16   17     6     keys  Ljava/util/List<Ljava/security/PublicKey;>;
           18   20     6     keys  Ljava/util/List<Ljava/security/PublicKey;>;
           24   25     3        e  Ljava/security/cert/CertificateException;
      Exception table:
        from    to  target  type
          21    22      23  Class java.security.cert.CertificateException
    MethodParameters:
         Name  Flags
      variant  
      params   

  public java.util.Collection<java.security.cert.X509Certificate> getTrustedCertificates();
    descriptor: ()Ljava/util/Collection;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.validator.PKIXValidator this
         0: .line 176
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
            areturn
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/validator/PKIXValidator;
    Signature: ()Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;

  public int getCertPathLength();
    descriptor: ()I
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.validator.PKIXValidator this
         0: .line 190
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.certPathLength:I
            ireturn
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/validator/PKIXValidator;

  private void setDefaultParameters(java.lang.String);
    descriptor: (Ljava/lang/String;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=2, args_size=2
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.lang.String variant
         0: .line 198
            aload 1 /* variant */
            ldc "tls server"
            if_acmpeq 2
         1: .line 199
            aload 1 /* variant */
            ldc "tls client"
            if_acmpne 4
         2: .line 200
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
            getstatic sun.security.validator.PKIXValidator.checkTLSRevocation:Z
            invokevirtual java.security.cert.PKIXBuilderParameters.setRevocationEnabled:(Z)V
         3: .line 201
            goto 5
         4: .line 202
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
            iconst_0
            invokevirtual java.security.cert.PKIXBuilderParameters.setRevocationEnabled:(Z)V
         5: .line 204
      StackMap locals:
      StackMap stack:
            return
        end local 1 // java.lang.String variant
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    6     0     this  Lsun/security/validator/PKIXValidator;
            0    6     1  variant  Ljava/lang/String;
    MethodParameters:
         Name  Flags
      variant  

  public java.security.cert.PKIXBuilderParameters getParameters();
    descriptor: ()Ljava/security/cert/PKIXBuilderParameters;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // sun.security.validator.PKIXValidator this
         0: .line 212
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
            areturn
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lsun/security/validator/PKIXValidator;

  java.security.cert.X509Certificate[] engineValidate(java.security.cert.X509Certificate[], java.util.Collection<java.security.cert.X509Certificate>, java.security.AlgorithmConstraints, );
    descriptor: ([Ljava/security/cert/X509Certificate;Ljava/util/Collection;Ljava/security/AlgorithmConstraints;Ljava/lang/Object;)[Ljava/security/cert/X509Certificate;
    flags: (0x0000) 
    Code:
      stack=6, locals=11, args_size=5
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.security.cert.X509Certificate[] chain
        start local 2 // java.util.Collection otherCerts
        start local 3 // java.security.AlgorithmConstraints constraints
        start local 4 // java.lang.Object parameter
         0: .line 220
            aload 1 /* chain */
            ifnull 1
            aload 1 /* chain */
            arraylength
            ifne 4
         1: .line 221
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertificateException
            dup
         2: .line 222
            ldc "null or zero-length certificate chain"
         3: .line 221
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
         4: .line 227
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 5 /* pkixParameters */
        start local 5 // java.security.cert.PKIXBuilderParameters pkixParameters
         5: .line 229
            new sun.security.provider.certpath.PKIXExtendedParameters
            dup
         6: .line 230
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.parameterTemplate:Ljava/security/cert/PKIXBuilderParameters;
            invokevirtual java.security.cert.PKIXBuilderParameters.clone:()Ljava/lang/Object;
            checkcast java.security.cert.PKIXBuilderParameters
         7: .line 231
            aload 4 /* parameter */
            instanceof java.security.Timestamp
            ifeq 9
         8: .line 232
            aload 4 /* parameter */
            checkcast java.security.Timestamp
            goto 10
      StackMap locals: sun.security.validator.PKIXValidator java.security.cert.X509Certificate[] java.util.Collection java.security.AlgorithmConstraints java.lang.Object java.security.cert.PKIXBuilderParameters
      StackMap stack: new 5 new 5 java.security.cert.PKIXBuilderParameters
         9: aconst_null
        10: .line 233
      StackMap locals: sun.security.validator.PKIXValidator java.security.cert.X509Certificate[] java.util.Collection java.security.AlgorithmConstraints java.lang.Object java.security.cert.PKIXBuilderParameters
      StackMap stack: new 5 new 5 java.security.cert.PKIXBuilderParameters java.security.Timestamp
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.variant:Ljava/lang/String;
        11: .line 229
            invokespecial sun.security.provider.certpath.PKIXExtendedParameters.<init>:(Ljava/security/cert/PKIXBuilderParameters;Ljava/security/Timestamp;Ljava/lang/String;)V
            astore 5 /* pkixParameters */
        12: .line 234
            goto 14
      StackMap locals:
      StackMap stack: java.security.InvalidAlgorithmParameterException
        13: pop
        14: .line 239
      StackMap locals:
      StackMap stack:
            aload 3 /* constraints */
            ifnull 18
        15: .line 240
            aload 5 /* pkixParameters */
        16: .line 241
            new sun.security.provider.certpath.AlgorithmChecker
            dup
            aload 3 /* constraints */
            aconst_null
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.variant:Ljava/lang/String;
            invokespecial sun.security.provider.certpath.AlgorithmChecker.<init>:(Ljava/security/AlgorithmConstraints;Ljava/security/Timestamp;Ljava/lang/String;)V
        17: .line 240
            invokevirtual java.security.cert.PKIXBuilderParameters.addCertPathChecker:(Ljava/security/cert/PKIXCertPathChecker;)V
        18: .line 247
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 6 /* prevIssuer */
        start local 6 // javax.security.auth.x500.X500Principal prevIssuer
        19: .line 248
            iconst_0
            istore 7 /* i */
        start local 7 // int i
        20: goto 39
        21: .line 249
      StackMap locals: javax.security.auth.x500.X500Principal int
      StackMap stack:
            aload 1 /* chain */
            iload 7 /* i */
            aaload
            astore 8 /* cert */
        start local 8 // java.security.cert.X509Certificate cert
        22: .line 250
            aload 8 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 9 /* dn */
        start local 9 // javax.security.auth.x500.X500Principal dn
        23: .line 252
            iload 7 /* i */
            ifne 26
        24: .line 253
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
            aload 8 /* cert */
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifeq 37
        25: .line 254
            iconst_1
            anewarray java.security.cert.X509Certificate
            dup
            iconst_0
            aload 1 /* chain */
            iconst_0
            aaload
            aastore
            areturn
        26: .line 257
      StackMap locals: java.security.cert.X509Certificate javax.security.auth.x500.X500Principal
      StackMap stack:
            aload 9 /* dn */
            aload 6 /* prevIssuer */
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifne 28
        27: .line 259
            aload 0 /* this */
            aload 1 /* chain */
            aload 2 /* otherCerts */
            aload 5 /* pkixParameters */
            invokevirtual sun.security.validator.PKIXValidator.doBuild:([Ljava/security/cert/X509Certificate;Ljava/util/Collection;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
            areturn
        28: .line 266
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedCerts:Ljava/util/Set;
            aload 8 /* cert */
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifne 34
        29: .line 267
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 9 /* dn */
            invokeinterface java.util.Map.containsKey:(Ljava/lang/Object;)Z
            ifeq 37
        30: .line 268
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 9 /* dn */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.List
        31: .line 269
            aload 8 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
        32: .line 268
            invokeinterface java.util.List.contains:(Ljava/lang/Object;)Z
        33: .line 269
            ifeq 37
        34: .line 271
      StackMap locals:
      StackMap stack:
            iload 7 /* i */
            anewarray java.security.cert.X509Certificate
            astore 10 /* newChain */
        start local 10 // java.security.cert.X509Certificate[] newChain
        35: .line 272
            aload 1 /* chain */
            iconst_0
            aload 10 /* newChain */
            iconst_0
            iload 7 /* i */
            invokestatic java.lang.System.arraycopy:(Ljava/lang/Object;ILjava/lang/Object;II)V
        36: .line 273
            aload 0 /* this */
            aload 10 /* newChain */
            aload 5 /* pkixParameters */
            invokevirtual sun.security.validator.PKIXValidator.doValidate:([Ljava/security/cert/X509Certificate;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
            areturn
        end local 10 // java.security.cert.X509Certificate[] newChain
        37: .line 276
      StackMap locals:
      StackMap stack:
            aload 8 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 6 /* prevIssuer */
        end local 9 // javax.security.auth.x500.X500Principal dn
        end local 8 // java.security.cert.X509Certificate cert
        38: .line 248
            iinc 7 /* i */ 1
      StackMap locals:
      StackMap stack:
        39: iload 7 /* i */
            aload 1 /* chain */
            arraylength
            if_icmplt 21
        end local 7 // int i
        40: .line 280
            aload 1 /* chain */
            aload 1 /* chain */
            arraylength
            iconst_1
            isub
            aaload
            astore 7 /* last */
        start local 7 // java.security.cert.X509Certificate last
        41: .line 281
            aload 7 /* last */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 8 /* issuer */
        start local 8 // javax.security.auth.x500.X500Principal issuer
        42: .line 282
            aload 7 /* last */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            pop
        43: .line 283
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 8 /* issuer */
            invokeinterface java.util.Map.containsKey:(Ljava/lang/Object;)Z
            ifeq 46
        44: .line 284
            aload 0 /* this */
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.trustedSubjects:Ljava/util/Map;
            aload 8 /* issuer */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.List
            aload 7 /* last */
            invokevirtual sun.security.validator.PKIXValidator.isSignatureValid:(Ljava/util/List;Ljava/security/cert/X509Certificate;)Z
            ifeq 46
        45: .line 285
            aload 0 /* this */
            aload 1 /* chain */
            aload 5 /* pkixParameters */
            invokevirtual sun.security.validator.PKIXValidator.doValidate:([Ljava/security/cert/X509Certificate;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
            areturn
        46: .line 289
      StackMap locals: sun.security.validator.PKIXValidator java.security.cert.X509Certificate[] java.util.Collection java.security.AlgorithmConstraints java.lang.Object java.security.cert.PKIXBuilderParameters javax.security.auth.x500.X500Principal java.security.cert.X509Certificate javax.security.auth.x500.X500Principal
      StackMap stack:
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.plugin:Z
            ifeq 63
        47: .line 293
            aload 1 /* chain */
            arraylength
            iconst_1
            if_icmple 60
        48: .line 295
            aload 1 /* chain */
            arraylength
            iconst_1
            isub
            anewarray java.security.cert.X509Certificate
        49: .line 294
            astore 9 /* newChain */
        start local 9 // java.security.cert.X509Certificate[] newChain
        50: .line 296
            aload 1 /* chain */
            iconst_0
            aload 9 /* newChain */
            iconst_0
            aload 9 /* newChain */
            arraylength
            invokestatic java.lang.System.arraycopy:(Ljava/lang/Object;ILjava/lang/Object;II)V
        51: .line 300
            aload 5 /* pkixParameters */
        52: .line 301
            new java.security.cert.TrustAnchor
            dup
        53: .line 302
            aload 1 /* chain */
            aload 1 /* chain */
            arraylength
            iconst_1
            isub
            aaload
            aconst_null
        54: .line 301
            invokespecial java.security.cert.TrustAnchor.<init>:(Ljava/security/cert/X509Certificate;[B)V
            invokestatic java.util.Collections.singleton:(Ljava/lang/Object;)Ljava/util/Set;
        55: .line 300
            invokevirtual java.security.cert.PKIXBuilderParameters.setTrustAnchors:(Ljava/util/Set;)V
        56: .line 303
            goto 59
      StackMap locals: sun.security.validator.PKIXValidator java.security.cert.X509Certificate[] java.util.Collection java.security.AlgorithmConstraints java.lang.Object java.security.cert.PKIXBuilderParameters javax.security.auth.x500.X500Principal java.security.cert.X509Certificate javax.security.auth.x500.X500Principal java.security.cert.X509Certificate[]
      StackMap stack: java.security.InvalidAlgorithmParameterException
        57: astore 10 /* iape */
        start local 10 // java.security.InvalidAlgorithmParameterException iape
        58: .line 305
            new java.security.cert.CertificateException
            dup
            aload 10 /* iape */
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/Throwable;)V
            athrow
        end local 10 // java.security.InvalidAlgorithmParameterException iape
        59: .line 307
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 9 /* newChain */
            aload 5 /* pkixParameters */
            invokevirtual sun.security.validator.PKIXValidator.doValidate:([Ljava/security/cert/X509Certificate;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
            pop
        end local 9 // java.security.cert.X509Certificate[] newChain
        60: .line 311
      StackMap locals:
      StackMap stack:
            new sun.security.validator.ValidatorException
            dup
        61: .line 312
            getstatic sun.security.validator.ValidatorException.T_NO_TRUST_ANCHOR:Ljava/lang/Object;
        62: .line 311
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/Object;)V
            athrow
        end local 8 // javax.security.auth.x500.X500Principal issuer
        end local 7 // java.security.cert.X509Certificate last
        end local 6 // javax.security.auth.x500.X500Principal prevIssuer
        63: .line 317
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 1 /* chain */
            aload 2 /* otherCerts */
            aload 5 /* pkixParameters */
            invokevirtual sun.security.validator.PKIXValidator.doBuild:([Ljava/security/cert/X509Certificate;Ljava/util/Collection;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
            areturn
        end local 5 // java.security.cert.PKIXBuilderParameters pkixParameters
        end local 4 // java.lang.Object parameter
        end local 3 // java.security.AlgorithmConstraints constraints
        end local 2 // java.util.Collection otherCerts
        end local 1 // java.security.cert.X509Certificate[] chain
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   64     0            this  Lsun/security/validator/PKIXValidator;
            0   64     1           chain  [Ljava/security/cert/X509Certificate;
            0   64     2      otherCerts  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
            0   64     3     constraints  Ljava/security/AlgorithmConstraints;
            0   64     4       parameter  Ljava/lang/Object;
            5   64     5  pkixParameters  Ljava/security/cert/PKIXBuilderParameters;
           19   63     6      prevIssuer  Ljavax/security/auth/x500/X500Principal;
           20   40     7               i  I
           22   38     8            cert  Ljava/security/cert/X509Certificate;
           23   38     9              dn  Ljavax/security/auth/x500/X500Principal;
           35   37    10        newChain  [Ljava/security/cert/X509Certificate;
           41   63     7            last  Ljava/security/cert/X509Certificate;
           42   63     8          issuer  Ljavax/security/auth/x500/X500Principal;
           50   60     9        newChain  [Ljava/security/cert/X509Certificate;
           58   59    10            iape  Ljava/security/InvalidAlgorithmParameterException;
      Exception table:
        from    to  target  type
           5    12      13  Class java.security.InvalidAlgorithmParameterException
          51    56      57  Class java.security.InvalidAlgorithmParameterException
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: ([Ljava/security/cert/X509Certificate;Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;Ljava/security/AlgorithmConstraints;Ljava/lang/Object;)[Ljava/security/cert/X509Certificate;
    MethodParameters:
             Name  Flags
      chain        
      otherCerts   
      constraints  
      parameter    

  private boolean isSignatureValid(java.util.List<java.security.PublicKey>, java.security.cert.X509Certificate);
    descriptor: (Ljava/util/List;Ljava/security/cert/X509Certificate;)Z
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=5, args_size=3
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.util.List keys
        start local 2 // java.security.cert.X509Certificate sub
         0: .line 322
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.plugin:Z
            ifeq 8
         1: .line 323
            aload 1 /* keys */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 4
            goto 6
      StackMap locals: sun.security.validator.PKIXValidator java.util.List java.security.cert.X509Certificate top java.util.Iterator
      StackMap stack:
         2: aload 4
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.PublicKey
            astore 3 /* key */
        start local 3 // java.security.PublicKey key
         3: .line 325
            aload 2 /* sub */
            aload 3 /* key */
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;)V
         4: .line 326
            iconst_1
            ireturn
         5: .line 327
      StackMap locals: sun.security.validator.PKIXValidator java.util.List java.security.cert.X509Certificate java.security.PublicKey java.util.Iterator
      StackMap stack: java.lang.Exception
            pop
        end local 3 // java.security.PublicKey key
         6: .line 323
      StackMap locals: sun.security.validator.PKIXValidator java.util.List java.security.cert.X509Certificate top java.util.Iterator
      StackMap stack:
            aload 4
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 2
         7: .line 331
            iconst_0
            ireturn
         8: .line 333
      StackMap locals: sun.security.validator.PKIXValidator java.util.List java.security.cert.X509Certificate
      StackMap stack:
            iconst_1
            ireturn
        end local 2 // java.security.cert.X509Certificate sub
        end local 1 // java.util.List keys
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    9     0  this  Lsun/security/validator/PKIXValidator;
            0    9     1  keys  Ljava/util/List<Ljava/security/PublicKey;>;
            0    9     2   sub  Ljava/security/cert/X509Certificate;
            3    6     3   key  Ljava/security/PublicKey;
      Exception table:
        from    to  target  type
           3     4       5  Class java.lang.Exception
    Signature: (Ljava/util/List<Ljava/security/PublicKey;>;Ljava/security/cert/X509Certificate;)Z
    MethodParameters:
      Name  Flags
      keys  
      sub   

  private static java.security.cert.X509Certificate[] toArray(java.security.cert.CertPath, java.security.cert.TrustAnchor);
    descriptor: (Ljava/security/cert/CertPath;Ljava/security/cert/TrustAnchor;)[Ljava/security/cert/X509Certificate;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=3, locals=5, args_size=2
        start local 0 // java.security.cert.CertPath path
        start local 1 // java.security.cert.TrustAnchor anchor
         0: .line 338
            aload 1 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            astore 2 /* trustedCert */
        start local 2 // java.security.cert.X509Certificate trustedCert
         1: .line 339
            aload 2 /* trustedCert */
            ifnonnull 5
         2: .line 340
            new sun.security.validator.ValidatorException
            dup
         3: .line 341
            ldc "TrustAnchor must be specified as certificate"
         4: .line 340
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;)V
            athrow
         5: .line 344
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 2 /* trustedCert */
            invokestatic sun.security.validator.PKIXValidator.verifyTrustAnchor:(Ljava/security/cert/X509Certificate;)V
         6: .line 347
            aload 0 /* path */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
         7: .line 346
            astore 3 /* list */
        start local 3 // java.util.List list
         8: .line 348
            aload 3 /* list */
            invokeinterface java.util.List.size:()I
            iconst_1
            iadd
            anewarray java.security.cert.X509Certificate
            astore 4 /* chain */
        start local 4 // java.security.cert.X509Certificate[] chain
         9: .line 349
            aload 3 /* list */
            aload 4 /* chain */
            invokeinterface java.util.List.toArray:([Ljava/lang/Object;)[Ljava/lang/Object;
            pop
        10: .line 350
            aload 4 /* chain */
            aload 4 /* chain */
            arraylength
            iconst_1
            isub
            aload 2 /* trustedCert */
            aastore
        11: .line 351
            aload 4 /* chain */
            areturn
        end local 4 // java.security.cert.X509Certificate[] chain
        end local 3 // java.util.List list
        end local 2 // java.security.cert.X509Certificate trustedCert
        end local 1 // java.security.cert.TrustAnchor anchor
        end local 0 // java.security.cert.CertPath path
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0   12     0         path  Ljava/security/cert/CertPath;
            0   12     1       anchor  Ljava/security/cert/TrustAnchor;
            1   12     2  trustedCert  Ljava/security/cert/X509Certificate;
            8   12     3         list  Ljava/util/List<+Ljava/security/cert/Certificate;>;
            9   12     4        chain  [Ljava/security/cert/X509Certificate;
    Exceptions:
      throws java.security.cert.CertificateException
    MethodParameters:
        Name  Flags
      path    
      anchor  

  private void setDate(java.security.cert.PKIXBuilderParameters);
    descriptor: (Ljava/security/cert/PKIXBuilderParameters;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=2, locals=3, args_size=2
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.security.cert.PKIXBuilderParameters params
         0: .line 358
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.validationDate:Ljava/util/Date;
            astore 2 /* date */
        start local 2 // java.util.Date date
         1: .line 359
            aload 2 /* date */
            ifnull 3
         2: .line 360
            aload 1 /* params */
            aload 2 /* date */
            invokevirtual java.security.cert.PKIXBuilderParameters.setDate:(Ljava/util/Date;)V
         3: .line 362
      StackMap locals: java.util.Date
      StackMap stack:
            return
        end local 2 // java.util.Date date
        end local 1 // java.security.cert.PKIXBuilderParameters params
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    4     0    this  Lsun/security/validator/PKIXValidator;
            0    4     1  params  Ljava/security/cert/PKIXBuilderParameters;
            1    4     2    date  Ljava/util/Date;
    MethodParameters:
        Name  Flags
      params  

  private java.security.cert.X509Certificate[] doValidate(java.security.cert.X509Certificate[], java.security.cert.PKIXBuilderParameters);
    descriptor: ([Ljava/security/cert/X509Certificate;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=6, args_size=3
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.security.cert.X509Certificate[] chain
        start local 2 // java.security.cert.PKIXBuilderParameters params
         0: .line 367
            aload 0 /* this */
            aload 2 /* params */
            invokevirtual sun.security.validator.PKIXValidator.setDate:(Ljava/security/cert/PKIXBuilderParameters;)V
         1: .line 370
            ldc "PKIX"
            invokestatic java.security.cert.CertPathValidator.getInstance:(Ljava/lang/String;)Ljava/security/cert/CertPathValidator;
            astore 3 /* validator */
        start local 3 // java.security.cert.CertPathValidator validator
         2: .line 371
            aload 0 /* this */
            getfield sun.security.validator.PKIXValidator.factory:Ljava/security/cert/CertificateFactory;
            aload 1 /* chain */
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            invokevirtual java.security.cert.CertificateFactory.generateCertPath:(Ljava/util/List;)Ljava/security/cert/CertPath;
            astore 4 /* path */
        start local 4 // java.security.cert.CertPath path
         3: .line 372
            aload 0 /* this */
            aload 1 /* chain */
            arraylength
            putfield sun.security.validator.PKIXValidator.certPathLength:I
         4: .line 374
            aload 3 /* validator */
            aload 4 /* path */
            aload 2 /* params */
            invokevirtual java.security.cert.CertPathValidator.validate:(Ljava/security/cert/CertPath;Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathValidatorResult;
            checkcast java.security.cert.PKIXCertPathValidatorResult
         5: .line 373
            astore 5 /* result */
        start local 5 // java.security.cert.PKIXCertPathValidatorResult result
         6: .line 376
            aload 4 /* path */
            aload 5 /* result */
            invokevirtual java.security.cert.PKIXCertPathValidatorResult.getTrustAnchor:()Ljava/security/cert/TrustAnchor;
            invokestatic sun.security.validator.PKIXValidator.toArray:(Ljava/security/cert/CertPath;Ljava/security/cert/TrustAnchor;)[Ljava/security/cert/X509Certificate;
         7: areturn
        end local 5 // java.security.cert.PKIXCertPathValidatorResult result
        end local 4 // java.security.cert.CertPath path
        end local 3 // java.security.cert.CertPathValidator validator
         8: .line 377
      StackMap locals:
      StackMap stack: java.security.GeneralSecurityException
            astore 3 /* e */
        start local 3 // java.security.GeneralSecurityException e
         9: .line 378
            new sun.security.validator.ValidatorException
            dup
        10: .line 379
            new java.lang.StringBuilder
            dup
            ldc "PKIX path validation failed: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 3 /* e */
            invokevirtual java.security.GeneralSecurityException.toString:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 3 /* e */
        11: .line 378
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.security.GeneralSecurityException e
        end local 2 // java.security.cert.PKIXBuilderParameters params
        end local 1 // java.security.cert.X509Certificate[] chain
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot       Name  Signature
            0   12     0       this  Lsun/security/validator/PKIXValidator;
            0   12     1      chain  [Ljava/security/cert/X509Certificate;
            0   12     2     params  Ljava/security/cert/PKIXBuilderParameters;
            2    8     3  validator  Ljava/security/cert/CertPathValidator;
            3    8     4       path  Ljava/security/cert/CertPath;
            6    8     5     result  Ljava/security/cert/PKIXCertPathValidatorResult;
            9   12     3          e  Ljava/security/GeneralSecurityException;
      Exception table:
        from    to  target  type
           0     7       8  Class java.security.GeneralSecurityException
    Exceptions:
      throws java.security.cert.CertificateException
    MethodParameters:
        Name  Flags
      chain   
      params  

  private static void verifyTrustAnchor(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)V
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=5, locals=2, args_size=1
        start local 0 // java.security.cert.X509Certificate trustedCert
         0: .line 390
            getstatic sun.security.validator.PKIXValidator.ALLOW_NON_CA_ANCHOR:Z
            ifeq 2
         1: .line 391
            return
         2: .line 395
      StackMap locals:
      StackMap stack:
            aload 0 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getVersion:()I
            iconst_3
            if_icmpge 4
         3: .line 396
            return
         4: .line 400
      StackMap locals:
      StackMap stack:
            aload 0 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            iconst_m1
            if_icmpne 11
         5: .line 401
            new sun.security.validator.ValidatorException
            dup
         6: .line 402
            new java.lang.StringBuilder
            dup
            ldc "TrustAnchor with subject \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         7: .line 403
            aload 0 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
         8: .line 404
            ldc "\" is not a CA certificate"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
         9: .line 402
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        10: .line 401
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        11: .line 409
      StackMap locals:
      StackMap stack:
            aload 0 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getKeyUsage:()[Z
            astore 1 /* keyUsageBits */
        start local 1 // boolean[] keyUsageBits
        12: .line 410
            aload 1 /* keyUsageBits */
            ifnull 19
            aload 1 /* keyUsageBits */
            iconst_5
            baload
            ifne 19
        13: .line 411
            new sun.security.validator.ValidatorException
            dup
        14: .line 412
            new java.lang.StringBuilder
            dup
            ldc "TrustAnchor with subject \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
        15: .line 413
            aload 0 /* trustedCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
        16: .line 414
            ldc "\" does not have keyCertSign bit set in KeyUsage extension"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        17: .line 412
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
        18: .line 411
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        19: .line 416
      StackMap locals: boolean[]
      StackMap stack:
            return
        end local 1 // boolean[] keyUsageBits
        end local 0 // java.security.cert.X509Certificate trustedCert
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   20     0   trustedCert  Ljava/security/cert/X509Certificate;
           12   20     1  keyUsageBits  [Z
    Exceptions:
      throws sun.security.validator.ValidatorException
    MethodParameters:
             Name  Flags
      trustedCert  

  private java.security.cert.X509Certificate[] doBuild(java.security.cert.X509Certificate[], java.util.Collection<java.security.cert.X509Certificate>, java.security.cert.PKIXBuilderParameters);
    descriptor: ([Ljava/security/cert/X509Certificate;Ljava/util/Collection;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=9, args_size=4
        start local 0 // sun.security.validator.PKIXValidator this
        start local 1 // java.security.cert.X509Certificate[] chain
        start local 2 // java.util.Collection otherCerts
        start local 3 // java.security.cert.PKIXBuilderParameters params
         0: .line 423
            aload 0 /* this */
            aload 3 /* params */
            invokevirtual sun.security.validator.PKIXValidator.setDate:(Ljava/security/cert/PKIXBuilderParameters;)V
         1: .line 426
            new java.security.cert.X509CertSelector
            dup
            invokespecial java.security.cert.X509CertSelector.<init>:()V
            astore 4 /* selector */
        start local 4 // java.security.cert.X509CertSelector selector
         2: .line 427
            aload 4 /* selector */
            aload 1 /* chain */
            iconst_0
            aaload
            invokevirtual java.security.cert.X509CertSelector.setCertificate:(Ljava/security/cert/X509Certificate;)V
         3: .line 428
            aload 3 /* params */
            aload 4 /* selector */
            invokevirtual java.security.cert.PKIXBuilderParameters.setTargetCertConstraints:(Ljava/security/cert/CertSelector;)V
         4: .line 432
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
         5: .line 431
            astore 5 /* certs */
        start local 5 // java.util.Collection certs
         6: .line 433
            aload 5 /* certs */
            aload 1 /* chain */
            invokestatic java.util.Arrays.asList:([Ljava/lang/Object;)Ljava/util/List;
            invokeinterface java.util.Collection.addAll:(Ljava/util/Collection;)Z
            pop
         7: .line 434
            aload 2 /* otherCerts */
            ifnull 9
         8: .line 435
            aload 5 /* certs */
            aload 2 /* otherCerts */
            invokeinterface java.util.Collection.addAll:(Ljava/util/Collection;)Z
            pop
         9: .line 437
      StackMap locals: java.security.cert.X509CertSelector java.util.Collection
      StackMap stack:
            ldc "Collection"
        10: .line 438
            new java.security.cert.CollectionCertStoreParameters
            dup
            aload 5 /* certs */
            invokespecial java.security.cert.CollectionCertStoreParameters.<init>:(Ljava/util/Collection;)V
        11: .line 437
            invokestatic java.security.cert.CertStore.getInstance:(Ljava/lang/String;Ljava/security/cert/CertStoreParameters;)Ljava/security/cert/CertStore;
            astore 6 /* store */
        start local 6 // java.security.cert.CertStore store
        12: .line 439
            aload 3 /* params */
            aload 6 /* store */
            invokevirtual java.security.cert.PKIXBuilderParameters.addCertStore:(Ljava/security/cert/CertStore;)V
        13: .line 442
            ldc "PKIX"
            invokestatic java.security.cert.CertPathBuilder.getInstance:(Ljava/lang/String;)Ljava/security/cert/CertPathBuilder;
            astore 7 /* builder */
        start local 7 // java.security.cert.CertPathBuilder builder
        14: .line 444
            aload 7 /* builder */
            aload 3 /* params */
            invokevirtual java.security.cert.CertPathBuilder.build:(Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathBuilderResult;
            checkcast java.security.cert.PKIXCertPathBuilderResult
        15: .line 443
            astore 8 /* result */
        start local 8 // java.security.cert.PKIXCertPathBuilderResult result
        16: .line 446
            aload 8 /* result */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getCertPath:()Ljava/security/cert/CertPath;
            aload 8 /* result */
            invokevirtual java.security.cert.PKIXCertPathBuilderResult.getTrustAnchor:()Ljava/security/cert/TrustAnchor;
            invokestatic sun.security.validator.PKIXValidator.toArray:(Ljava/security/cert/CertPath;Ljava/security/cert/TrustAnchor;)[Ljava/security/cert/X509Certificate;
        17: areturn
        end local 8 // java.security.cert.PKIXCertPathBuilderResult result
        end local 7 // java.security.cert.CertPathBuilder builder
        end local 6 // java.security.cert.CertStore store
        end local 5 // java.util.Collection certs
        end local 4 // java.security.cert.X509CertSelector selector
        18: .line 447
      StackMap locals: sun.security.validator.PKIXValidator java.security.cert.X509Certificate[] java.util.Collection java.security.cert.PKIXBuilderParameters
      StackMap stack: java.security.GeneralSecurityException
            astore 4 /* e */
        start local 4 // java.security.GeneralSecurityException e
        19: .line 448
            new sun.security.validator.ValidatorException
            dup
        20: .line 449
            new java.lang.StringBuilder
            dup
            ldc "PKIX path building failed: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 4 /* e */
            invokevirtual java.security.GeneralSecurityException.toString:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 4 /* e */
        21: .line 448
            invokespecial sun.security.validator.ValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.security.GeneralSecurityException e
        end local 3 // java.security.cert.PKIXBuilderParameters params
        end local 2 // java.util.Collection otherCerts
        end local 1 // java.security.cert.X509Certificate[] chain
        end local 0 // sun.security.validator.PKIXValidator this
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   22     0        this  Lsun/security/validator/PKIXValidator;
            0   22     1       chain  [Ljava/security/cert/X509Certificate;
            0   22     2  otherCerts  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
            0   22     3      params  Ljava/security/cert/PKIXBuilderParameters;
            2   18     4    selector  Ljava/security/cert/X509CertSelector;
            6   18     5       certs  Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;
           12   18     6       store  Ljava/security/cert/CertStore;
           14   18     7     builder  Ljava/security/cert/CertPathBuilder;
           16   18     8      result  Ljava/security/cert/PKIXCertPathBuilderResult;
           19   22     4           e  Ljava/security/GeneralSecurityException;
      Exception table:
        from    to  target  type
           0    17      18  Class java.security.GeneralSecurityException
    Exceptions:
      throws java.security.cert.CertificateException
    Signature: ([Ljava/security/cert/X509Certificate;Ljava/util/Collection<Ljava/security/cert/X509Certificate;>;Ljava/security/cert/PKIXBuilderParameters;)[Ljava/security/cert/X509Certificate;
    MethodParameters:
            Name  Flags
      chain       
      otherCerts  
      params      
}
SourceFile: "PKIXValidator.java"