http://www.bouncycastle.org/java.html: The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.
  • The Legion of the Bouncy Castle Inc. 
class org.bouncycastle.pkix.jcajce.RevocationUtilities
  minor version: 0
  major version: 59
  flags: flags: (0x0020) ACC_SUPER
  this_class: org.bouncycastle.pkix.jcajce.RevocationUtilities
  super_class: java.lang.Object
{
  protected static final org.bouncycastle.pkix.jcajce.PKIXCRLUtil CRL_UTIL;
    descriptor: Lorg/bouncycastle/pkix/jcajce/PKIXCRLUtil;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String CERTIFICATE_POLICIES;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String BASIC_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String POLICY_MAPPINGS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String SUBJECT_ALTERNATIVE_NAME;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String NAME_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String KEY_USAGE;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String INHIBIT_ANY_POLICY;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String ISSUING_DISTRIBUTION_POINT;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String DELTA_CRL_INDICATOR;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String POLICY_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String FRESHEST_CRL;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String CRL_DISTRIBUTION_POINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String AUTHORITY_KEY_IDENTIFIER;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String ANY_POLICY;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.5.29.32.0"

  protected static final java.lang.String CRL_NUMBER;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final int KEY_CERT_SIGN;
    descriptor: I
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: 5

  protected static final int CRL_SIGN;
    descriptor: I
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: 6

  protected static final java.lang.String[] crlReasons;
    descriptor: [Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 72
            new org.bouncycastle.pkix.jcajce.PKIXCRLUtil
            dup
            invokespecial org.bouncycastle.pkix.jcajce.PKIXCRLUtil.<init>:()V
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CRL_UTIL:Lorg/bouncycastle/pkix/jcajce/PKIXCRLUtil;
         1: .line 74
            getstatic org.bouncycastle.asn1.x509.Extension.certificatePolicies:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CERTIFICATE_POLICIES:Ljava/lang/String;
         2: .line 75
            getstatic org.bouncycastle.asn1.x509.Extension.basicConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.BASIC_CONSTRAINTS:Ljava/lang/String;
         3: .line 76
            getstatic org.bouncycastle.asn1.x509.Extension.policyMappings:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.POLICY_MAPPINGS:Ljava/lang/String;
         4: .line 77
            getstatic org.bouncycastle.asn1.x509.Extension.subjectAlternativeName:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.SUBJECT_ALTERNATIVE_NAME:Ljava/lang/String;
         5: .line 78
            getstatic org.bouncycastle.asn1.x509.Extension.nameConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.NAME_CONSTRAINTS:Ljava/lang/String;
         6: .line 79
            getstatic org.bouncycastle.asn1.x509.Extension.keyUsage:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.KEY_USAGE:Ljava/lang/String;
         7: .line 80
            getstatic org.bouncycastle.asn1.x509.Extension.inhibitAnyPolicy:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.INHIBIT_ANY_POLICY:Ljava/lang/String;
         8: .line 81
            getstatic org.bouncycastle.asn1.x509.Extension.issuingDistributionPoint:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;
         9: .line 82
            getstatic org.bouncycastle.asn1.x509.Extension.deltaCRLIndicator:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.DELTA_CRL_INDICATOR:Ljava/lang/String;
        10: .line 83
            getstatic org.bouncycastle.asn1.x509.Extension.policyConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.POLICY_CONSTRAINTS:Ljava/lang/String;
        11: .line 84
            getstatic org.bouncycastle.asn1.x509.Extension.freshestCRL:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.FRESHEST_CRL:Ljava/lang/String;
        12: .line 85
            getstatic org.bouncycastle.asn1.x509.Extension.cRLDistributionPoints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CRL_DISTRIBUTION_POINTS:Ljava/lang/String;
        13: .line 86
            getstatic org.bouncycastle.asn1.x509.Extension.authorityKeyIdentifier:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.AUTHORITY_KEY_IDENTIFIER:Ljava/lang/String;
        14: .line 90
            getstatic org.bouncycastle.asn1.x509.Extension.cRLNumber:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CRL_NUMBER:Ljava/lang/String;
        15: .line 98
            bipush 11
            anewarray java.lang.String
            dup
            iconst_0
        16: .line 99
            ldc "unspecified"
            aastore
            dup
            iconst_1
        17: .line 100
            ldc "keyCompromise"
            aastore
            dup
            iconst_2
        18: .line 101
            ldc "cACompromise"
            aastore
            dup
            iconst_3
        19: .line 102
            ldc "affiliationChanged"
            aastore
            dup
            iconst_4
        20: .line 103
            ldc "superseded"
            aastore
            dup
            iconst_5
        21: .line 104
            ldc "cessationOfOperation"
            aastore
            dup
            bipush 6
        22: .line 105
            ldc "certificateHold"
            aastore
            dup
            bipush 7
        23: .line 106
            ldc "unknown"
            aastore
            dup
            bipush 8
        24: .line 107
            ldc "removeFromCRL"
            aastore
            dup
            bipush 9
        25: .line 108
            ldc "privilegeWithdrawn"
            aastore
            dup
            bipush 10
        26: .line 109
            ldc "aACompromise"
            aastore
        27: .line 98
            putstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.crlReasons:[Ljava/lang/String;
        28: .line 109
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  void <init>();
    descriptor: ()V
    flags: (0x0000) 
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.pkix.jcajce.RevocationUtilities this
         0: .line 70
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // org.bouncycastle.pkix.jcajce.RevocationUtilities this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/pkix/jcajce/RevocationUtilities;

  protected static java.security.cert.TrustAnchor findTrustAnchor(java.security.cert.X509Certificate, java.util.Set);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;)Ljava/security/cert/TrustAnchor;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.Set trustAnchors
         0: .line 128
            aload 0 /* cert */
            aload 1 /* trustAnchors */
            aconst_null
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.findTrustAnchor:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Ljava/security/cert/TrustAnchor;
            areturn
        end local 1 // java.util.Set trustAnchors
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0    1     0          cert  Ljava/security/cert/X509Certificate;
            0    1     1  trustAnchors  Ljava/util/Set;
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
              Name  Flags
      cert          
      trustAnchors  

  protected static java.security.cert.TrustAnchor findTrustAnchor(java.security.cert.X509Certificate, java.util.Set, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Ljava/security/cert/TrustAnchor;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=10, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.Set trustAnchors
        start local 2 // java.lang.String sigProvider
         0: .line 151
            aconst_null
            astore 3 /* trust */
        start local 3 // java.security.cert.TrustAnchor trust
         1: .line 152
            aconst_null
            astore 4 /* trustPublicKey */
        start local 4 // java.security.PublicKey trustPublicKey
         2: .line 153
            aconst_null
            astore 5 /* invalidKeyEx */
        start local 5 // java.lang.Exception invalidKeyEx
         3: .line 155
            new java.security.cert.X509CertSelector
            dup
            invokespecial java.security.cert.X509CertSelector.<init>:()V
            astore 6 /* certSelectX509 */
        start local 6 // java.security.cert.X509CertSelector certSelectX509
         4: .line 156
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            astore 7 /* certIssuer */
        start local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
         5: .line 160
            aload 6 /* certSelectX509 */
            aload 7 /* certIssuer */
            invokevirtual org.bouncycastle.asn1.x500.X500Name.getEncoded:()[B
            invokevirtual java.security.cert.X509CertSelector.setSubject:([B)V
         6: .line 161
            goto 9
         7: .line 162
      StackMap locals: java.security.cert.X509Certificate java.util.Set java.lang.String java.security.cert.TrustAnchor java.security.PublicKey java.lang.Exception java.security.cert.X509CertSelector org.bouncycastle.asn1.x500.X500Name
      StackMap stack: java.io.IOException
            astore 8 /* ex */
        start local 8 // java.io.IOException ex
         8: .line 164
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "Cannot set subject search criteria for trust anchor."
            aload 8 /* ex */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 8 // java.io.IOException ex
         9: .line 167
      StackMap locals:
      StackMap stack:
            aload 1 /* trustAnchors */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 8 /* iter */
        start local 8 // java.util.Iterator iter
        10: .line 168
            goto 37
        11: .line 170
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 8 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 3 /* trust */
        12: .line 171
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            ifnull 18
        13: .line 173
            aload 6 /* certSelectX509 */
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509CertSelector.match:(Ljava/security/cert/Certificate;)Z
            ifeq 16
        14: .line 175
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 4 /* trustPublicKey */
        15: .line 176
            goto 30
        16: .line 179
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        17: .line 181
            goto 30
        18: .line 182
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAName:()Ljava/lang/String;
            ifnull 29
        19: .line 183
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            ifnull 29
        20: .line 187
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCA:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            astore 9 /* caName */
        start local 9 // org.bouncycastle.asn1.x500.X500Name caName
        21: .line 188
            aload 7 /* certIssuer */
            aload 9 /* caName */
            invokevirtual org.bouncycastle.asn1.x500.X500Name.equals:(Ljava/lang/Object;)Z
            ifeq 24
        22: .line 190
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            astore 4 /* trustPublicKey */
        23: .line 191
            goto 30
        24: .line 194
      StackMap locals: org.bouncycastle.asn1.x500.X500Name
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        end local 9 // org.bouncycastle.asn1.x500.X500Name caName
        25: .line 196
            goto 30
        26: .line 197
      StackMap locals: java.security.cert.X509Certificate java.util.Set java.lang.String java.security.cert.TrustAnchor java.security.PublicKey java.lang.Exception java.security.cert.X509CertSelector org.bouncycastle.asn1.x500.X500Name java.util.Iterator
      StackMap stack: java.lang.IllegalArgumentException
            pop
        27: .line 199
            aconst_null
            astore 3 /* trust */
        28: .line 201
            goto 30
        29: .line 204
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        30: .line 207
      StackMap locals:
      StackMap stack:
            aload 4 /* trustPublicKey */
            ifnull 37
        31: .line 211
            aload 0 /* cert */
            aload 4 /* trustPublicKey */
            aload 2 /* sigProvider */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.verifyX509Certificate:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
        32: .line 212
            goto 37
        33: .line 213
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 9 /* ex */
        start local 9 // java.lang.Exception ex
        34: .line 215
            aload 9 /* ex */
            astore 5 /* invalidKeyEx */
        35: .line 216
            aconst_null
            astore 3 /* trust */
        36: .line 217
            aconst_null
            astore 4 /* trustPublicKey */
        end local 9 // java.lang.Exception ex
        37: .line 168
      StackMap locals:
      StackMap stack:
            aload 8 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifeq 38
            aload 3 /* trust */
            ifnull 11
        38: .line 222
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            ifnonnull 40
            aload 5 /* invalidKeyEx */
            ifnull 40
        39: .line 224
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "TrustAnchor found but certificate validation failed."
            aload 5 /* invalidKeyEx */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        40: .line 227
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            areturn
        end local 8 // java.util.Iterator iter
        end local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
        end local 6 // java.security.cert.X509CertSelector certSelectX509
        end local 5 // java.lang.Exception invalidKeyEx
        end local 4 // java.security.PublicKey trustPublicKey
        end local 3 // java.security.cert.TrustAnchor trust
        end local 2 // java.lang.String sigProvider
        end local 1 // java.util.Set trustAnchors
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   41     0            cert  Ljava/security/cert/X509Certificate;
            0   41     1    trustAnchors  Ljava/util/Set;
            0   41     2     sigProvider  Ljava/lang/String;
            1   41     3           trust  Ljava/security/cert/TrustAnchor;
            2   41     4  trustPublicKey  Ljava/security/PublicKey;
            3   41     5    invalidKeyEx  Ljava/lang/Exception;
            4   41     6  certSelectX509  Ljava/security/cert/X509CertSelector;
            5   41     7      certIssuer  Lorg/bouncycastle/asn1/x500/X500Name;
            8    9     8              ex  Ljava/io/IOException;
           10   41     8            iter  Ljava/util/Iterator;
           21   25     9          caName  Lorg/bouncycastle/asn1/x500/X500Name;
           34   37     9              ex  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           5     6       7  Class java.io.IOException
          20    25      26  Class java.lang.IllegalArgumentException
          31    32      33  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
              Name  Flags
      cert          
      trustAnchors  
      sigProvider   

  static boolean isIssuerTrustAnchor(java.security.cert.X509Certificate, java.util.Set, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Z
    flags: (0x0008) ACC_STATIC
    Code:
      stack=3, locals=3, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.Set trustAnchors
        start local 2 // java.lang.String sigProvider
         0: .line 238
            aload 0 /* cert */
            aload 1 /* trustAnchors */
            aload 2 /* sigProvider */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.findTrustAnchor:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Ljava/security/cert/TrustAnchor;
            ifnull 1
            iconst_1
            ireturn
      StackMap locals:
      StackMap stack:
         1: iconst_0
         2: ireturn
         3: .line 240
      StackMap locals:
      StackMap stack: java.lang.Exception
            pop
         4: .line 242
            iconst_0
            ireturn
        end local 2 // java.lang.String sigProvider
        end local 1 // java.util.Set trustAnchors
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0    5     0          cert  Ljava/security/cert/X509Certificate;
            0    5     1  trustAnchors  Ljava/util/Set;
            0    5     2   sigProvider  Ljava/lang/String;
      Exception table:
        from    to  target  type
           0     2       3  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
              Name  Flags
      cert          
      trustAnchors  
      sigProvider   

  static java.util.List<org.bouncycastle.jcajce.PKIXCertStore> getAdditionalStoresFromAltNames(byte[], java.util.Map<org.bouncycastle.asn1.x509.GeneralName, org.bouncycastle.jcajce.PKIXCertStore>);
    descriptor: ([BLjava/util/Map;)Ljava/util/List;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=8, args_size=2
        start local 0 // byte[] issuerAlternativeName
        start local 1 // java.util.Map altNameCertStoreMap
         0: .line 253
            aload 0 /* issuerAlternativeName */
            ifnull 13
         1: .line 255
            aload 0 /* issuerAlternativeName */
            invokestatic org.bouncycastle.asn1.ASN1OctetString.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1OctetString;
            invokevirtual org.bouncycastle.asn1.ASN1OctetString.getOctets:()[B
            invokestatic org.bouncycastle.asn1.x509.GeneralNames.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/GeneralNames;
            astore 2 /* issuerAltName */
        start local 2 // org.bouncycastle.asn1.x509.GeneralNames issuerAltName
         2: .line 257
            aload 2 /* issuerAltName */
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
            astore 3 /* names */
        start local 3 // org.bouncycastle.asn1.x509.GeneralName[] names
         3: .line 258
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 4 /* stores */
        start local 4 // java.util.List stores
         4: .line 260
            iconst_0
            istore 5 /* i */
        start local 5 // int i
         5: goto 11
         6: .line 262
      StackMap locals: byte[] java.util.Map org.bouncycastle.asn1.x509.GeneralNames org.bouncycastle.asn1.x509.GeneralName[] java.util.List int
      StackMap stack:
            aload 3 /* names */
            iload 5 /* i */
            aaload
            astore 6 /* altName */
        start local 6 // org.bouncycastle.asn1.x509.GeneralName altName
         7: .line 264
            aload 1 /* altNameCertStoreMap */
            aload 6 /* altName */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast org.bouncycastle.jcajce.PKIXCertStore
            astore 7 /* altStore */
        start local 7 // org.bouncycastle.jcajce.PKIXCertStore altStore
         8: .line 266
            aload 7 /* altStore */
            ifnull 10
         9: .line 268
            aload 4 /* stores */
            aload 7 /* altStore */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 7 // org.bouncycastle.jcajce.PKIXCertStore altStore
        end local 6 // org.bouncycastle.asn1.x509.GeneralName altName
        10: .line 260
      StackMap locals:
      StackMap stack:
            iinc 5 /* i */ 1
      StackMap locals:
      StackMap stack:
        11: iload 5 /* i */
            aload 3 /* names */
            arraylength
            if_icmpne 6
        end local 5 // int i
        12: .line 272
            aload 4 /* stores */
            areturn
        end local 4 // java.util.List stores
        end local 3 // org.bouncycastle.asn1.x509.GeneralName[] names
        end local 2 // org.bouncycastle.asn1.x509.GeneralNames issuerAltName
        13: .line 276
      StackMap locals: byte[] java.util.Map
      StackMap stack:
            getstatic java.util.Collections.EMPTY_LIST:Ljava/util/List;
            areturn
        end local 1 // java.util.Map altNameCertStoreMap
        end local 0 // byte[] issuerAlternativeName
      LocalVariableTable:
        Start  End  Slot                   Name  Signature
            0   14     0  issuerAlternativeName  [B
            0   14     1    altNameCertStoreMap  Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCertStore;>;
            2   13     2          issuerAltName  Lorg/bouncycastle/asn1/x509/GeneralNames;
            3   13     3                  names  [Lorg/bouncycastle/asn1/x509/GeneralName;
            4   13     4                 stores  Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCertStore;>;
            5   12     5                      i  I
            7   10     6                altName  Lorg/bouncycastle/asn1/x509/GeneralName;
            8   10     7               altStore  Lorg/bouncycastle/jcajce/PKIXCertStore;
    Exceptions:
      throws java.security.cert.CertificateParsingException
    Signature: ([BLjava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCertStore;>;)Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCertStore;>;
    MethodParameters:
                       Name  Flags
      issuerAlternativeName  
      altNameCertStoreMap    

  protected static java.util.Date getValidDate(org.bouncycastle.jcajce.PKIXExtendedParameters);
    descriptor: (Lorg/bouncycastle/jcajce/PKIXExtendedParameters;)Ljava/util/Date;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=2, args_size=1
        start local 0 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
         0: .line 282
            aload 0 /* paramsPKIX */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters.getDate:()Ljava/util/Date;
            astore 1 /* validDate */
        start local 1 // java.util.Date validDate
         1: .line 284
            aload 1 /* validDate */
            ifnonnull 3
         2: .line 286
            new java.util.Date
            dup
            invokespecial java.util.Date.<init>:()V
            astore 1 /* validDate */
         3: .line 289
      StackMap locals: java.util.Date
      StackMap stack:
            aload 1 /* validDate */
            areturn
        end local 1 // java.util.Date validDate
        end local 0 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0    4     0  paramsPKIX  Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            1    4     1   validDate  Ljava/util/Date;
    MethodParameters:
            Name  Flags
      paramsPKIX  

  protected static boolean isSelfIssued(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Z
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.security.cert.X509Certificate cert
         0: .line 294
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectDN:()Ljava/security/Principal;
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerDN:()Ljava/security/Principal;
            invokeinterface java.security.Principal.equals:(Ljava/lang/Object;)Z
            ireturn
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  cert  Ljava/security/cert/X509Certificate;
    MethodParameters:
      Name  Flags
      cert  

  protected static org.bouncycastle.asn1.ASN1Primitive getExtensionValue(java.security.cert.X509Extension, org.bouncycastle.asn1.ASN1ObjectIdentifier);
    descriptor: (Ljava/security/cert/X509Extension;Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;)Lorg/bouncycastle/asn1/ASN1Primitive;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=3, args_size=2
        start local 0 // java.security.cert.X509Extension ext
        start local 1 // org.bouncycastle.asn1.ASN1ObjectIdentifier oid
         0: .line 310
            aload 0 /* ext */
            aload 1 /* oid */
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            invokeinterface java.security.cert.X509Extension.getExtensionValue:(Ljava/lang/String;)[B
            astore 2 /* bytes */
        start local 2 // byte[] bytes
         1: .line 311
            aload 2 /* bytes */
            ifnonnull 3
         2: .line 313
            aconst_null
            areturn
         3: .line 316
      StackMap locals: byte[]
      StackMap stack:
            aload 1 /* oid */
            aload 2 /* bytes */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getObject:(Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;[B)Lorg/bouncycastle/asn1/ASN1Primitive;
            areturn
        end local 2 // byte[] bytes
        end local 1 // org.bouncycastle.asn1.ASN1ObjectIdentifier oid
        end local 0 // java.security.cert.X509Extension ext
      LocalVariableTable:
        Start  End  Slot   Name  Signature
            0    4     0    ext  Ljava/security/cert/X509Extension;
            0    4     1    oid  Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            1    4     2  bytes  [B
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
      Name  Flags
      ext   
      oid   

  private static org.bouncycastle.asn1.ASN1Primitive getObject(org.bouncycastle.asn1.ASN1ObjectIdentifier, byte[]);
    descriptor: (Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;[B)Lorg/bouncycastle/asn1/ASN1Primitive;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=5, locals=3, args_size=2
        start local 0 // org.bouncycastle.asn1.ASN1ObjectIdentifier oid
        start local 1 // byte[] ext
         0: .line 326
            aload 1 /* ext */
            invokestatic org.bouncycastle.asn1.ASN1OctetString.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1OctetString;
            invokevirtual org.bouncycastle.asn1.ASN1OctetString.getOctets:()[B
            invokestatic org.bouncycastle.asn1.ASN1Primitive.fromByteArray:([B)Lorg/bouncycastle/asn1/ASN1Primitive;
         1: areturn
         2: .line 328
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 2 /* e */
        start local 2 // java.lang.Exception e
         3: .line 330
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            new java.lang.StringBuilder
            dup
            ldc "exception processing extension "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* oid */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 2 /* e */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 2 // java.lang.Exception e
        end local 1 // byte[] ext
        end local 0 // org.bouncycastle.asn1.ASN1ObjectIdentifier oid
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    4     0   oid  Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            0    4     1   ext  [B
            3    4     2     e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0     1       2  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
      Name  Flags
      oid   
      ext   

  protected static org.bouncycastle.asn1.x509.AlgorithmIdentifier getAlgorithmIdentifier(java.security.PublicKey);
    descriptor: (Ljava/security/PublicKey;)Lorg/bouncycastle/asn1/x509/AlgorithmIdentifier;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=3, args_size=1
        start local 0 // java.security.PublicKey key
         0: .line 340
            new org.bouncycastle.asn1.ASN1InputStream
            dup
            aload 0 /* key */
            invokeinterface java.security.PublicKey.getEncoded:()[B
            invokespecial org.bouncycastle.asn1.ASN1InputStream.<init>:([B)V
            astore 1 /* aIn */
        start local 1 // org.bouncycastle.asn1.ASN1InputStream aIn
         1: .line 342
            aload 1 /* aIn */
            invokevirtual org.bouncycastle.asn1.ASN1InputStream.readObject:()Lorg/bouncycastle/asn1/ASN1Primitive;
            invokestatic org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/SubjectPublicKeyInfo;
            astore 2 /* info */
        start local 2 // org.bouncycastle.asn1.x509.SubjectPublicKeyInfo info
         2: .line 344
            aload 2 /* info */
            invokevirtual org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getAlgorithm:()Lorg/bouncycastle/asn1/x509/AlgorithmIdentifier;
         3: areturn
        end local 2 // org.bouncycastle.asn1.x509.SubjectPublicKeyInfo info
        end local 1 // org.bouncycastle.asn1.ASN1InputStream aIn
         4: .line 346
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 1 /* e */
        start local 1 // java.lang.Exception e
         5: .line 348
            new java.security.cert.CertPathValidatorException
            dup
            ldc "subject public key cannot be decoded"
            aload 1 /* e */
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 1 // java.lang.Exception e
        end local 0 // java.security.PublicKey key
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    6     0   key  Ljava/security/PublicKey;
            1    4     1   aIn  Lorg/bouncycastle/asn1/ASN1InputStream;
            2    4     2  info  Lorg/bouncycastle/asn1/x509/SubjectPublicKeyInfo;
            5    6     1     e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0     3       4  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
      Name  Flags
      key   

  protected static java.util.Collection findCertificates(org.bouncycastle.jcajce.PKIXCertStoreSelector, java.util.List);
    descriptor: (Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=7, args_size=2
        start local 0 // org.bouncycastle.jcajce.PKIXCertStoreSelector certSelect
        start local 1 // java.util.List certStores
         0: .line 369
            new java.util.LinkedHashSet
            dup
            invokespecial java.util.LinkedHashSet.<init>:()V
            astore 2 /* certs */
        start local 2 // java.util.Set certs
         1: .line 370
            aload 1 /* certStores */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 3 /* iter */
        start local 3 // java.util.Iterator iter
         2: .line 372
            goto 20
         3: .line 374
      StackMap locals: java.util.Set java.util.Iterator
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            astore 4 /* obj */
        start local 4 // java.lang.Object obj
         4: .line 376
            aload 4 /* obj */
            instanceof org.bouncycastle.util.Store
            ifeq 12
         5: .line 378
            aload 4 /* obj */
            checkcast org.bouncycastle.util.Store
            astore 5 /* certStore */
        start local 5 // org.bouncycastle.util.Store certStore
         6: .line 381
            aload 2 /* certs */
            aload 5 /* certStore */
            aload 0 /* certSelect */
            invokeinterface org.bouncycastle.util.Store.getMatches:(Lorg/bouncycastle/util/Selector;)Ljava/util/Collection;
            invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
            pop
         7: .line 382
            goto 20
         8: .line 383
      StackMap locals: org.bouncycastle.jcajce.PKIXCertStoreSelector java.util.List java.util.Set java.util.Iterator java.lang.Object org.bouncycastle.util.Store
      StackMap stack: org.bouncycastle.util.StoreException
            astore 6 /* e */
        start local 6 // org.bouncycastle.util.StoreException e
         9: .line 385
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        10: .line 386
            ldc "Problem while picking certificates from X.509 store."
            aload 6 /* e */
        11: .line 385
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // org.bouncycastle.util.StoreException e
        end local 5 // org.bouncycastle.util.Store certStore
        12: .line 391
      StackMap locals:
      StackMap stack:
            aload 4 /* obj */
            checkcast java.security.cert.CertStore
            astore 5 /* certStore */
        start local 5 // java.security.cert.CertStore certStore
        13: .line 395
            aload 2 /* certs */
            aload 0 /* certSelect */
            aload 5 /* certStore */
            invokestatic org.bouncycastle.jcajce.PKIXCertStoreSelector.getCertificates:(Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;Ljava/security/cert/CertStore;)Ljava/util/Collection;
            invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
            pop
        14: .line 396
            goto 20
        15: .line 397
      StackMap locals: org.bouncycastle.jcajce.PKIXCertStoreSelector java.util.List java.util.Set java.util.Iterator java.lang.Object java.security.cert.CertStore
      StackMap stack: java.security.cert.CertStoreException
            astore 6 /* e */
        start local 6 // java.security.cert.CertStoreException e
        16: .line 399
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        17: .line 400
            ldc "Problem while picking certificates from certificate store."
        18: .line 401
            aload 6 /* e */
        19: .line 399
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.security.cert.CertStoreException e
        end local 5 // java.security.cert.CertStore certStore
        end local 4 // java.lang.Object obj
        20: .line 372
      StackMap locals:
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 3
        21: .line 405
            aload 2 /* certs */
            areturn
        end local 3 // java.util.Iterator iter
        end local 2 // java.util.Set certs
        end local 1 // java.util.List certStores
        end local 0 // org.bouncycastle.jcajce.PKIXCertStoreSelector certSelect
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   22     0  certSelect  Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;
            0   22     1  certStores  Ljava/util/List;
            1   22     2       certs  Ljava/util/Set;
            2   22     3        iter  Ljava/util/Iterator;
            4   20     4         obj  Ljava/lang/Object;
            6   12     5   certStore  Lorg/bouncycastle/util/Store;
            9   12     6           e  Lorg/bouncycastle/util/StoreException;
           13   20     5   certStore  Ljava/security/cert/CertStore;
           16   20     6           e  Ljava/security/cert/CertStoreException;
      Exception table:
        from    to  target  type
           6     7       8  Class org.bouncycastle.util.StoreException
          13    14      15  Class java.security.cert.CertStoreException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
            Name  Flags
      certSelect  
      certStores  

  static java.util.List<org.bouncycastle.jcajce.PKIXCRLStore> getAdditionalStoresFromCRLDistributionPoint(org.bouncycastle.asn1.x509.CRLDistPoint, java.util.Map<org.bouncycastle.asn1.x509.GeneralName, org.bouncycastle.jcajce.PKIXCRLStore>);
    descriptor: (Lorg/bouncycastle/asn1/x509/CRLDistPoint;Ljava/util/Map;)Ljava/util/List;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=9, args_size=2
        start local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
        start local 1 // java.util.Map namedCRLStoreMap
         0: .line 411
            aload 0 /* crldp */
            ifnull 28
         1: .line 413
            aconst_null
            astore 2 /* dps */
        start local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
         2: .line 416
            aload 0 /* crldp */
            invokevirtual org.bouncycastle.asn1.x509.CRLDistPoint.getDistributionPoints:()[Lorg/bouncycastle/asn1/x509/DistributionPoint;
            astore 2 /* dps */
         3: .line 417
            goto 8
         4: .line 418
      StackMap locals: org.bouncycastle.asn1.x509.CRLDistPoint java.util.Map org.bouncycastle.asn1.x509.DistributionPoint[]
      StackMap stack: java.lang.Exception
            astore 3 /* e */
        start local 3 // java.lang.Exception e
         5: .line 420
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
         6: .line 421
            ldc "Distribution points could not be read."
            aload 3 /* e */
         7: .line 420
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.lang.Exception e
         8: .line 423
      StackMap locals:
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 3 /* stores */
        start local 3 // java.util.List stores
         9: .line 425
            iconst_0
            istore 4 /* i */
        start local 4 // int i
        10: goto 26
        11: .line 427
      StackMap locals: java.util.List int
      StackMap stack:
            aload 2 /* dps */
            iload 4 /* i */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            astore 5 /* dpn */
        start local 5 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        12: .line 429
            aload 5 /* dpn */
            ifnull 25
        13: .line 431
            aload 5 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getType:()I
            ifne 25
        14: .line 434
            aload 5 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
        15: .line 433
            invokestatic org.bouncycastle.asn1.x509.GeneralNames.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/GeneralNames;
        16: .line 434
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
        17: .line 433
            astore 6 /* genNames */
        start local 6 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        18: .line 436
            iconst_0
            istore 7 /* j */
        start local 7 // int j
        19: goto 24
        20: .line 438
      StackMap locals: org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 1 /* namedCRLStoreMap */
            aload 6 /* genNames */
            iload 7 /* j */
            aaload
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast org.bouncycastle.jcajce.PKIXCRLStore
            astore 8 /* store */
        start local 8 // org.bouncycastle.jcajce.PKIXCRLStore store
        21: .line 439
            aload 8 /* store */
            ifnull 23
        22: .line 441
            aload 3 /* stores */
            aload 8 /* store */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 8 // org.bouncycastle.jcajce.PKIXCRLStore store
        23: .line 436
      StackMap locals:
      StackMap stack:
            iinc 7 /* j */ 1
      StackMap locals:
      StackMap stack:
        24: iload 7 /* j */
            aload 6 /* genNames */
            arraylength
            if_icmplt 20
        end local 7 // int j
        end local 6 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        end local 5 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        25: .line 425
      StackMap locals:
      StackMap stack:
            iinc 4 /* i */ 1
      StackMap locals:
      StackMap stack:
        26: iload 4 /* i */
            aload 2 /* dps */
            arraylength
            if_icmplt 11
        end local 4 // int i
        27: .line 448
            aload 3 /* stores */
            areturn
        end local 3 // java.util.List stores
        end local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
        28: .line 452
      StackMap locals:
      StackMap stack:
            getstatic java.util.Collections.EMPTY_LIST:Ljava/util/List;
            areturn
        end local 1 // java.util.Map namedCRLStoreMap
        end local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   29     0             crldp  Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            0   29     1  namedCRLStoreMap  Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
            2   28     2               dps  [Lorg/bouncycastle/asn1/x509/DistributionPoint;
            5    8     3                 e  Ljava/lang/Exception;
            9   28     3            stores  Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
           10   27     4                 i  I
           12   25     5               dpn  Lorg/bouncycastle/asn1/x509/DistributionPointName;
           18   25     6          genNames  [Lorg/bouncycastle/asn1/x509/GeneralName;
           19   25     7                 j  I
           21   23     8             store  Lorg/bouncycastle/jcajce/PKIXCRLStore;
      Exception table:
        from    to  target  type
           2     3       4  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    Signature: (Lorg/bouncycastle/asn1/x509/CRLDistPoint;Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCRLStore;>;)Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
    MethodParameters:
                  Name  Flags
      crldp             
      namedCRLStoreMap  

  protected static void getCRLIssuersFromDistributionPoint(org.bouncycastle.asn1.x509.DistributionPoint, java.util.Collection, java.security.cert.X509CRLSelector);
    descriptor: (Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/util/Collection;Ljava/security/cert/X509CRLSelector;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=7, args_size=3
        start local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
        start local 1 // java.util.Collection issuerPrincipals
        start local 2 // java.security.cert.X509CRLSelector selector
         0: .line 478
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 3 /* issuers */
        start local 3 // java.util.List issuers
         1: .line 480
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getCRLIssuer:()Lorg/bouncycastle/asn1/x509/GeneralNames;
            ifnull 18
         2: .line 482
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getCRLIssuer:()Lorg/bouncycastle/asn1/x509/GeneralNames;
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
            astore 4 /* genNames */
        start local 4 // org.bouncycastle.asn1.x509.GeneralName[] genNames
         3: .line 484
            iconst_0
            istore 5 /* j */
        start local 5 // int j
         4: goto 16
         5: .line 486
      StackMap locals: java.util.List org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 4 /* genNames */
            iload 5 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getTagNo:()I
            iconst_4
            if_icmpne 15
         6: .line 490
            aload 3 /* issuers */
            aload 4 /* genNames */
            iload 5 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
         7: .line 491
            invokeinterface org.bouncycastle.asn1.ASN1Encodable.toASN1Primitive:()Lorg/bouncycastle/asn1/ASN1Primitive;
            invokevirtual org.bouncycastle.asn1.ASN1Primitive.getEncoded:()[B
         8: .line 490
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
         9: .line 492
            goto 15
        10: .line 493
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 6 /* e */
        start local 6 // java.io.IOException e
        11: .line 495
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        12: .line 496
            ldc "CRL issuer information from distribution point cannot be decoded."
        13: .line 497
            aload 6 /* e */
        14: .line 495
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.io.IOException e
        15: .line 484
      StackMap locals:
      StackMap stack:
            iinc 5 /* j */ 1
      StackMap locals:
      StackMap stack:
        16: iload 5 /* j */
            aload 4 /* genNames */
            arraylength
            if_icmplt 5
        end local 5 // int j
        end local 4 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        17: .line 501
            goto 26
        18: .line 508
      StackMap locals:
      StackMap stack:
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            ifnonnull 22
        19: .line 510
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        20: .line 511
            ldc "CRL issuer is omitted from distribution point but no distributionPoint field present."
        21: .line 510
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        22: .line 514
      StackMap locals:
      StackMap stack:
            aload 1 /* issuerPrincipals */
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 4 /* it */
        start local 4 // java.util.Iterator it
        23: goto 25
        24: .line 516
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 3 /* issuers */
            aload 4 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        25: .line 514
      StackMap locals:
      StackMap stack:
            aload 4 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 24
        end local 4 // java.util.Iterator it
        26: .line 563
      StackMap locals:
      StackMap stack:
            aload 3 /* issuers */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 4 /* it */
        start local 4 // java.util.Iterator it
        27: .line 564
            goto 34
        28: .line 568
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 2 /* selector */
            aload 4 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.asn1.x500.X500Name
            invokevirtual org.bouncycastle.asn1.x500.X500Name.getEncoded:()[B
            invokevirtual java.security.cert.X509CRLSelector.addIssuerName:([B)V
        29: .line 569
            goto 34
        30: .line 570
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 5 /* ex */
        start local 5 // java.io.IOException ex
        31: .line 572
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        32: .line 573
            ldc "Cannot decode CRL issuer information."
            aload 5 /* ex */
        33: .line 572
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // java.io.IOException ex
        34: .line 564
      StackMap locals:
      StackMap stack:
            aload 4 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 28
        35: .line 576
            return
        end local 4 // java.util.Iterator it
        end local 3 // java.util.List issuers
        end local 2 // java.security.cert.X509CRLSelector selector
        end local 1 // java.util.Collection issuerPrincipals
        end local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   36     0                dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
            0   36     1  issuerPrincipals  Ljava/util/Collection;
            0   36     2          selector  Ljava/security/cert/X509CRLSelector;
            1   36     3           issuers  Ljava/util/List;
            3   17     4          genNames  [Lorg/bouncycastle/asn1/x509/GeneralName;
            4   17     5                 j  I
           11   15     6                 e  Ljava/io/IOException;
           23   26     4                it  Ljava/util/Iterator;
           27   36     4                it  Ljava/util/Iterator;
           31   34     5                ex  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           6     9      10  Class java.io.IOException
          28    29      30  Class java.io.IOException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
                  Name  Flags
      dp                
      issuerPrincipals  
      selector          

  private static java.math.BigInteger getSerialNumber(java.lang.Object);
    descriptor: (Ljava/lang/Object;)Ljava/math/BigInteger;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // java.lang.Object cert
         0: .line 581
            aload 0 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getSerialNumber:()Ljava/math/BigInteger;
            areturn
        end local 0 // java.lang.Object cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  cert  Ljava/lang/Object;
    MethodParameters:
      Name  Flags
      cert  

  protected static void getCertStatus(java.util.Date, java.security.cert.X509CRL, java.lang.Object, org.bouncycastle.pkix.jcajce.CertStatus);
    descriptor: (Ljava/util/Date;Ljava/security/cert/X509CRL;Ljava/lang/Object;Lorg/bouncycastle/pkix/jcajce/CertStatus;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=8, args_size=4
        start local 0 // java.util.Date validDate
        start local 1 // java.security.cert.X509CRL crl
        start local 2 // java.lang.Object cert
        start local 3 // org.bouncycastle.pkix.jcajce.CertStatus certStatus
         0: .line 591
            aconst_null
            astore 4 /* crl_entry */
        start local 4 // java.security.cert.X509CRLEntry crl_entry
         1: .line 596
            aload 1 /* crl */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.isIndirectCRL:(Ljava/security/cert/X509CRL;)Z
            istore 5 /* isIndirect */
        start local 5 // boolean isIndirect
         2: .line 597
            goto 5
        end local 5 // boolean isIndirect
         3: .line 598
      StackMap locals: java.util.Date java.security.cert.X509CRL java.lang.Object org.bouncycastle.pkix.jcajce.CertStatus java.security.cert.X509CRLEntry
      StackMap stack: java.security.cert.CRLException
            astore 6 /* exception */
        start local 6 // java.security.cert.CRLException exception
         4: .line 600
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "Failed check for indirect CRL."
            aload 6 /* exception */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.security.cert.CRLException exception
        start local 5 // boolean isIndirect
         5: .line 603
      StackMap locals: int
      StackMap stack:
            iload 5 /* isIndirect */
            ifeq 16
         6: .line 605
            aload 1 /* crl */
            aload 2 /* cert */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getSerialNumber:(Ljava/lang/Object;)Ljava/math/BigInteger;
            invokevirtual java.security.cert.X509CRL.getRevokedCertificate:(Ljava/math/BigInteger;)Ljava/security/cert/X509CRLEntry;
            astore 4 /* crl_entry */
         7: .line 607
            aload 4 /* crl_entry */
            ifnonnull 9
         8: .line 609
            return
         9: .line 612
      StackMap locals:
      StackMap stack:
            aload 4 /* crl_entry */
            invokevirtual java.security.cert.X509CRLEntry.getCertificateIssuer:()Ljavax/security/auth/x500/X500Principal;
            astore 6 /* certificateIssuer */
        start local 6 // javax.security.auth.x500.X500Principal certificateIssuer
        10: .line 615
            aload 6 /* certificateIssuer */
            ifnonnull 13
        11: .line 617
            aload 1 /* crl */
            invokevirtual java.security.cert.X509CRL.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            astore 7 /* certIssuer */
        start local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
        12: .line 618
            goto 14
        end local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
        13: .line 621
      StackMap locals: javax.security.auth.x500.X500Principal
      StackMap stack:
            aload 6 /* certificateIssuer */
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            astore 7 /* certIssuer */
        start local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
        14: .line 624
      StackMap locals: org.bouncycastle.asn1.x500.X500Name
      StackMap stack:
            aload 2 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            aload 7 /* certIssuer */
            invokevirtual org.bouncycastle.asn1.x500.X500Name.equals:(Ljava/lang/Object;)Z
            ifne 21
        15: .line 626
            return
        end local 7 // org.bouncycastle.asn1.x500.X500Name certIssuer
        end local 6 // javax.security.auth.x500.X500Principal certificateIssuer
        16: .line 629
      StackMap locals:
      StackMap stack:
            aload 2 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            aload 1 /* crl */
            invokevirtual java.security.cert.X509CRL.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokevirtual org.bouncycastle.asn1.x500.X500Name.equals:(Ljava/lang/Object;)Z
            ifne 18
        17: .line 631
            return
        18: .line 635
      StackMap locals:
      StackMap stack:
            aload 1 /* crl */
            aload 2 /* cert */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getSerialNumber:(Ljava/lang/Object;)Ljava/math/BigInteger;
            invokevirtual java.security.cert.X509CRL.getRevokedCertificate:(Ljava/math/BigInteger;)Ljava/security/cert/X509CRLEntry;
            astore 4 /* crl_entry */
        19: .line 637
            aload 4 /* crl_entry */
            ifnonnull 21
        20: .line 639
            return
        21: .line 643
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 6 /* reasonCode */
        start local 6 // org.bouncycastle.asn1.ASN1Enumerated reasonCode
        22: .line 644
            aload 4 /* crl_entry */
            invokevirtual java.security.cert.X509CRLEntry.hasExtensions:()Z
            ifeq 34
        23: .line 650
            aload 4 /* crl_entry */
        24: .line 651
            getstatic org.bouncycastle.asn1.x509.Extension.reasonCode:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
        25: .line 650
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;)Lorg/bouncycastle/asn1/ASN1Primitive;
        26: .line 649
            invokestatic org.bouncycastle.asn1.ASN1Enumerated.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1Enumerated;
        27: .line 648
            astore 6 /* reasonCode */
        28: .line 652
            goto 34
        29: .line 653
      StackMap locals: java.util.Date java.security.cert.X509CRL java.lang.Object org.bouncycastle.pkix.jcajce.CertStatus java.security.cert.X509CRLEntry int org.bouncycastle.asn1.ASN1Enumerated
      StackMap stack: java.lang.Exception
            astore 7 /* e */
        start local 7 // java.lang.Exception e
        30: .line 655
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        31: .line 656
            ldc "Reason code CRL entry extension could not be decoded."
        32: .line 657
            aload 7 /* e */
        33: .line 655
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 7 // java.lang.Exception e
        34: .line 663
      StackMap locals:
      StackMap stack:
            aload 0 /* validDate */
            invokevirtual java.util.Date.getTime:()J
            aload 4 /* crl_entry */
            invokevirtual java.security.cert.X509CRLEntry.getRevocationDate:()Ljava/util/Date;
            invokevirtual java.util.Date.getTime:()J
            lcmp
            ifge 40
        35: .line 664
            aload 6 /* reasonCode */
            ifnull 40
        36: .line 665
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.ASN1Enumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            ifeq 40
        37: .line 666
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.ASN1Enumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            iconst_1
            if_icmpeq 40
        38: .line 667
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.ASN1Enumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            iconst_2
            if_icmpeq 40
        39: .line 668
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.ASN1Enumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            bipush 8
            if_icmpne 45
        40: .line 672
      StackMap locals:
      StackMap stack:
            aload 6 /* reasonCode */
            ifnull 43
        41: .line 674
            aload 3 /* certStatus */
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.ASN1Enumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.setCertStatus:(I)V
        42: .line 675
            goto 44
        43: .line 679
      StackMap locals:
      StackMap stack:
            aload 3 /* certStatus */
            iconst_0
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.setCertStatus:(I)V
        44: .line 681
      StackMap locals:
      StackMap stack:
            aload 3 /* certStatus */
            aload 4 /* crl_entry */
            invokevirtual java.security.cert.X509CRLEntry.getRevocationDate:()Ljava/util/Date;
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.setRevocationDate:(Ljava/util/Date;)V
        45: .line 683
      StackMap locals:
      StackMap stack:
            return
        end local 6 // org.bouncycastle.asn1.ASN1Enumerated reasonCode
        end local 5 // boolean isIndirect
        end local 4 // java.security.cert.X509CRLEntry crl_entry
        end local 3 // org.bouncycastle.pkix.jcajce.CertStatus certStatus
        end local 2 // java.lang.Object cert
        end local 1 // java.security.cert.X509CRL crl
        end local 0 // java.util.Date validDate
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0   46     0          validDate  Ljava/util/Date;
            0   46     1                crl  Ljava/security/cert/X509CRL;
            0   46     2               cert  Ljava/lang/Object;
            0   46     3         certStatus  Lorg/bouncycastle/pkix/jcajce/CertStatus;
            1   46     4          crl_entry  Ljava/security/cert/X509CRLEntry;
            2    3     5         isIndirect  Z
            5   46     5         isIndirect  Z
            4    5     6          exception  Ljava/security/cert/CRLException;
           10   16     6  certificateIssuer  Ljavax/security/auth/x500/X500Principal;
           12   13     7         certIssuer  Lorg/bouncycastle/asn1/x500/X500Name;
           14   16     7         certIssuer  Lorg/bouncycastle/asn1/x500/X500Name;
           22   46     6         reasonCode  Lorg/bouncycastle/asn1/ASN1Enumerated;
           30   34     7                  e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           1     2       3  Class java.security.cert.CRLException
          23    28      29  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
            Name  Flags
      validDate   
      crl         
      cert        
      certStatus  

  protected static java.util.Set getDeltaCRLs(java.util.Date, java.security.cert.X509CRL, java.util.List<java.security.cert.CertStore>, java.util.List<org.bouncycastle.jcajce.PKIXCRLStore>);
    descriptor: (Ljava/util/Date;Ljava/security/cert/X509CRL;Ljava/util/List;Ljava/util/List;)Ljava/util/Set;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=13, args_size=4
        start local 0 // java.util.Date validityDate
        start local 1 // java.security.cert.X509CRL completeCRL
        start local 2 // java.util.List certStores
        start local 3 // java.util.List pkixCrlStores
         0: .line 698
            new java.security.cert.X509CRLSelector
            dup
            invokespecial java.security.cert.X509CRLSelector.<init>:()V
            astore 4 /* baseDeltaSelect */
        start local 4 // java.security.cert.X509CRLSelector baseDeltaSelect
         1: .line 702
            aload 4 /* baseDeltaSelect */
            aload 1 /* completeCRL */
            invokevirtual java.security.cert.X509CRL.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokevirtual org.bouncycastle.asn1.x500.X500Name.getEncoded:()[B
            invokevirtual java.security.cert.X509CRLSelector.addIssuerName:([B)V
         2: .line 703
            goto 5
         3: .line 704
      StackMap locals: java.util.Date java.security.cert.X509CRL java.util.List java.util.List java.security.cert.X509CRLSelector
      StackMap stack: java.io.IOException
            astore 5 /* e */
        start local 5 // java.io.IOException e
         4: .line 706
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "cannot extract issuer from CRL."
            aload 5 /* e */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // java.io.IOException e
         5: .line 711
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 5 /* completeCRLNumber */
        start local 5 // java.math.BigInteger completeCRLNumber
         6: .line 714
            aload 1 /* completeCRL */
         7: .line 715
            getstatic org.bouncycastle.asn1.x509.Extension.cRLNumber:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
         8: .line 714
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;)Lorg/bouncycastle/asn1/ASN1Primitive;
            astore 6 /* derObject */
        start local 6 // org.bouncycastle.asn1.ASN1Primitive derObject
         9: .line 716
            aload 6 /* derObject */
            ifnull 16
        10: .line 718
            aload 6 /* derObject */
            invokestatic org.bouncycastle.asn1.ASN1Integer.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1Integer;
            invokevirtual org.bouncycastle.asn1.ASN1Integer.getPositiveValue:()Ljava/math/BigInteger;
            astore 5 /* completeCRLNumber */
        end local 6 // org.bouncycastle.asn1.ASN1Primitive derObject
        11: .line 720
            goto 16
        12: .line 721
      StackMap locals: java.util.Date java.security.cert.X509CRL java.util.List java.util.List java.security.cert.X509CRLSelector java.math.BigInteger
      StackMap stack: java.lang.Exception
            astore 6 /* e */
        start local 6 // java.lang.Exception e
        13: .line 723
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        14: .line 724
            ldc "cannot extract CRL number extension from CRL"
            aload 6 /* e */
        15: .line 723
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.lang.Exception e
        16: .line 728
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 6 /* idp */
        start local 6 // byte[] idp
        17: .line 731
            aload 1 /* completeCRL */
            getstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;
            invokevirtual java.security.cert.X509CRL.getExtensionValue:(Ljava/lang/String;)[B
            astore 6 /* idp */
        18: .line 732
            goto 24
        19: .line 733
      StackMap locals: java.util.Date java.security.cert.X509CRL java.util.List java.util.List java.security.cert.X509CRLSelector java.math.BigInteger byte[]
      StackMap stack: java.lang.Exception
            astore 7 /* e */
        start local 7 // java.lang.Exception e
        20: .line 735
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        21: .line 736
            ldc "issuing distribution point extension value could not be read"
        22: .line 737
            aload 7 /* e */
        23: .line 735
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 7 // java.lang.Exception e
        24: .line 742
      StackMap locals:
      StackMap stack:
            aload 4 /* baseDeltaSelect */
            aload 5 /* completeCRLNumber */
            ifnonnull 25
            aconst_null
            goto 27
      StackMap locals:
      StackMap stack: java.security.cert.X509CRLSelector
        25: aload 5 /* completeCRLNumber */
        26: .line 743
            lconst_1
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
        27: .line 742
      StackMap locals: java.util.Date java.security.cert.X509CRL java.util.List java.util.List java.security.cert.X509CRLSelector java.math.BigInteger byte[]
      StackMap stack: java.security.cert.X509CRLSelector java.math.BigInteger
            invokevirtual java.security.cert.X509CRLSelector.setMinCRLNumber:(Ljava/math/BigInteger;)V
        28: .line 745
            new org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder
            dup
            aload 4 /* baseDeltaSelect */
            invokespecial org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.<init>:(Ljava/security/cert/CRLSelector;)V
            astore 7 /* selBuilder */
        start local 7 // org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder selBuilder
        29: .line 747
            aload 7 /* selBuilder */
            aload 6 /* idp */
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.setIssuingDistributionPoint:([B)V
        30: .line 748
            aload 7 /* selBuilder */
            iconst_1
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.setIssuingDistributionPointEnabled:(Z)V
        31: .line 751
            aload 7 /* selBuilder */
            aload 5 /* completeCRLNumber */
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.setMaxBaseCRLNumber:(Ljava/math/BigInteger;)V
        32: .line 753
            aload 7 /* selBuilder */
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.build:()Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;
            astore 8 /* deltaSelect */
        start local 8 // org.bouncycastle.jcajce.PKIXCRLStoreSelector deltaSelect
        33: .line 756
            getstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CRL_UTIL:Lorg/bouncycastle/pkix/jcajce/PKIXCRLUtil;
            aload 8 /* deltaSelect */
            aload 0 /* validityDate */
            aload 2 /* certStores */
            aload 3 /* pkixCrlStores */
            invokevirtual org.bouncycastle.pkix.jcajce.PKIXCRLUtil.findCRLs:(Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;Ljava/util/Date;Ljava/util/List;Ljava/util/List;)Ljava/util/Set;
            astore 9 /* temp */
        start local 9 // java.util.Set temp
        34: .line 758
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 10 /* result */
        start local 10 // java.util.Set result
        35: .line 760
            aload 9 /* temp */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 11 /* it */
        start local 11 // java.util.Iterator it
        36: goto 40
        37: .line 762
      StackMap locals: java.util.Date java.security.cert.X509CRL java.util.List java.util.List java.security.cert.X509CRLSelector java.math.BigInteger byte[] org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder org.bouncycastle.jcajce.PKIXCRLStoreSelector java.util.Set java.util.Set java.util.Iterator
      StackMap stack:
            aload 11 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 12 /* crl */
        start local 12 // java.security.cert.X509CRL crl
        38: .line 764
            aload 12 /* crl */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.isDeltaCRL:(Ljava/security/cert/X509CRL;)Z
            ifeq 40
        39: .line 766
            aload 10 /* result */
            aload 12 /* crl */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 12 // java.security.cert.X509CRL crl
        40: .line 760
      StackMap locals:
      StackMap stack:
            aload 11 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 37
        end local 11 // java.util.Iterator it
        41: .line 770
            aload 10 /* result */
            areturn
        end local 10 // java.util.Set result
        end local 9 // java.util.Set temp
        end local 8 // org.bouncycastle.jcajce.PKIXCRLStoreSelector deltaSelect
        end local 7 // org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder selBuilder
        end local 6 // byte[] idp
        end local 5 // java.math.BigInteger completeCRLNumber
        end local 4 // java.security.cert.X509CRLSelector baseDeltaSelect
        end local 3 // java.util.List pkixCrlStores
        end local 2 // java.util.List certStores
        end local 1 // java.security.cert.X509CRL completeCRL
        end local 0 // java.util.Date validityDate
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0   42     0       validityDate  Ljava/util/Date;
            0   42     1        completeCRL  Ljava/security/cert/X509CRL;
            0   42     2         certStores  Ljava/util/List<Ljava/security/cert/CertStore;>;
            0   42     3      pkixCrlStores  Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
            1   42     4    baseDeltaSelect  Ljava/security/cert/X509CRLSelector;
            4    5     5                  e  Ljava/io/IOException;
            6   42     5  completeCRLNumber  Ljava/math/BigInteger;
            9   11     6          derObject  Lorg/bouncycastle/asn1/ASN1Primitive;
           13   16     6                  e  Ljava/lang/Exception;
           17   42     6                idp  [B
           20   24     7                  e  Ljava/lang/Exception;
           29   42     7         selBuilder  Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector$Builder;
           33   42     8        deltaSelect  Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;
           34   42     9               temp  Ljava/util/Set;
           35   42    10             result  Ljava/util/Set;
           36   41    11                 it  Ljava/util/Iterator;
           38   40    12                crl  Ljava/security/cert/X509CRL;
      Exception table:
        from    to  target  type
           1     2       3  Class java.io.IOException
           6    11      12  Class java.lang.Exception
          17    18      19  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    Signature: (Ljava/util/Date;Ljava/security/cert/X509CRL;Ljava/util/List<Ljava/security/cert/CertStore;>;Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;)Ljava/util/Set;
    MethodParameters:
               Name  Flags
      validityDate   
      completeCRL    
      certStores     
      pkixCrlStores  

  private static boolean isDeltaCRL(java.security.cert.X509CRL);
    descriptor: (Ljava/security/cert/X509CRL;)Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=2, args_size=1
        start local 0 // java.security.cert.X509CRL crl
         0: .line 775
            aload 0 /* crl */
            invokevirtual java.security.cert.X509CRL.getCriticalExtensionOIDs:()Ljava/util/Set;
            astore 1 /* critical */
        start local 1 // java.util.Set critical
         1: .line 777
            aload 1 /* critical */
            ifnonnull 3
         2: .line 779
            iconst_0
            ireturn
         3: .line 782
      StackMap locals: java.util.Set
      StackMap stack:
            aload 1 /* critical */
            getstatic org.bouncycastle.pkix.jcajce.RFC3280CertPathUtilities.DELTA_CRL_INDICATOR:Ljava/lang/String;
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ireturn
        end local 1 // java.util.Set critical
        end local 0 // java.security.cert.X509CRL crl
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0    4     0       crl  Ljava/security/cert/X509CRL;
            1    4     1  critical  Ljava/util/Set;
    MethodParameters:
      Name  Flags
      crl   

  protected static java.util.Set getCompleteCRLs(org.bouncycastle.asn1.x509.DistributionPoint, java.lang.Object, java.util.Date, java.util.List, java.util.List);
    descriptor: (Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/lang/Object;Ljava/util/Date;Ljava/util/List;Ljava/util/List;)Ljava/util/Set;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=8, args_size=5
        start local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
        start local 1 // java.lang.Object cert
        start local 2 // java.util.Date validityDate
        start local 3 // java.util.List certStores
        start local 4 // java.util.List crlStores
         0: .line 799
            new java.security.cert.X509CRLSelector
            dup
            invokespecial java.security.cert.X509CRLSelector.<init>:()V
            astore 5 /* baseCrlSelect */
        start local 5 // java.security.cert.X509CRLSelector baseCrlSelect
         1: .line 803
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 6 /* issuers */
        start local 6 // java.util.Set issuers
         2: .line 805
            aload 6 /* issuers */
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         3: .line 807
            aload 0 /* dp */
            aload 6 /* issuers */
            aload 5 /* baseCrlSelect */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getCRLIssuersFromDistributionPoint:(Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/util/Collection;Ljava/security/cert/X509CRLSelector;)V
        end local 6 // java.util.Set issuers
         4: .line 808
            goto 9
         5: .line 809
      StackMap locals: org.bouncycastle.asn1.x509.DistributionPoint java.lang.Object java.util.Date java.util.List java.util.List java.security.cert.X509CRLSelector
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 6 /* e */
        start local 6 // org.bouncycastle.pkix.jcajce.AnnotatedException e
         6: .line 811
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
         7: .line 812
            ldc "Could not get issuer information from distribution point."
            aload 6 /* e */
         8: .line 811
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // org.bouncycastle.pkix.jcajce.AnnotatedException e
         9: .line 815
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            instanceof java.security.cert.X509Certificate
            ifeq 11
        10: .line 817
            aload 5 /* baseCrlSelect */
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509CRLSelector.setCertificateChecking:(Ljava/security/cert/X509Certificate;)V
        11: .line 820
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder
            dup
            aload 5 /* baseCrlSelect */
            invokespecial org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.<init>:(Ljava/security/cert/CRLSelector;)V
            iconst_1
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.setCompleteCRLEnabled:(Z)Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector$Builder;
            invokevirtual org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder.build:()Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;
            astore 6 /* crlSelect */
        start local 6 // org.bouncycastle.jcajce.PKIXCRLStoreSelector crlSelect
        12: .line 822
            getstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.CRL_UTIL:Lorg/bouncycastle/pkix/jcajce/PKIXCRLUtil;
            aload 6 /* crlSelect */
            aload 2 /* validityDate */
            aload 3 /* certStores */
            aload 4 /* crlStores */
            invokevirtual org.bouncycastle.pkix.jcajce.PKIXCRLUtil.findCRLs:(Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;Ljava/util/Date;Ljava/util/List;Ljava/util/List;)Ljava/util/Set;
            astore 7 /* crls */
        start local 7 // java.util.Set crls
        13: .line 824
            aload 7 /* crls */
            aload 1 /* cert */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.checkCRLsNotEmpty:(Ljava/util/Set;Ljava/lang/Object;)V
        14: .line 826
            aload 7 /* crls */
            areturn
        end local 7 // java.util.Set crls
        end local 6 // org.bouncycastle.jcajce.PKIXCRLStoreSelector crlSelect
        end local 5 // java.security.cert.X509CRLSelector baseCrlSelect
        end local 4 // java.util.List crlStores
        end local 3 // java.util.List certStores
        end local 2 // java.util.Date validityDate
        end local 1 // java.lang.Object cert
        end local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   15     0             dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
            0   15     1           cert  Ljava/lang/Object;
            0   15     2   validityDate  Ljava/util/Date;
            0   15     3     certStores  Ljava/util/List;
            0   15     4      crlStores  Ljava/util/List;
            1   15     5  baseCrlSelect  Ljava/security/cert/X509CRLSelector;
            2    4     6        issuers  Ljava/util/Set;
            6    9     6              e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           12   15     6      crlSelect  Lorg/bouncycastle/jcajce/PKIXCRLStoreSelector;
           13   15     7           crls  Ljava/util/Set;
      Exception table:
        from    to  target  type
           1     4       5  Class org.bouncycastle.pkix.jcajce.AnnotatedException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException, org.bouncycastle.pkix.jcajce.CRLNotFoundException
    MethodParameters:
              Name  Flags
      dp            
      cert          
      validityDate  
      certStores    
      crlStores     

  protected static java.util.Date getValidCertDateFromValidityModel(org.bouncycastle.jcajce.PKIXExtendedParameters, java.security.cert.CertPath, int);
    descriptor: (Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/CertPath;I)Ljava/util/Date;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=5, args_size=3
        start local 0 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
        start local 1 // java.security.cert.CertPath certPath
        start local 2 // int index
         0: .line 833
            aload 0 /* paramsPKIX */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters.getValidityModel:()I
            iconst_1
            if_icmpne 35
         1: .line 836
            iload 2 /* index */
            ifgt 3
         2: .line 838
            aload 0 /* paramsPKIX */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getValidDate:(Lorg/bouncycastle/jcajce/PKIXExtendedParameters;)Ljava/util/Date;
            areturn
         3: .line 843
      StackMap locals:
      StackMap stack:
            iload 2 /* index */
            iconst_1
            isub
            ifne 30
         4: .line 845
            aconst_null
            astore 3 /* dateOfCertgen */
        start local 3 // org.bouncycastle.asn1.ASN1GeneralizedTime dateOfCertgen
         5: .line 848
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
            iload 2 /* index */
            iconst_1
            isub
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            getstatic org.bouncycastle.asn1.isismtt.ISISMTTObjectIdentifiers.id_isismtt_at_dateOfCertGen:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            invokevirtual java.security.cert.X509Certificate.getExtensionValue:(Ljava/lang/String;)[B
            astore 4 /* extBytes */
        start local 4 // byte[] extBytes
         6: .line 849
            aload 4 /* extBytes */
            ifnull 17
         7: .line 851
            aload 4 /* extBytes */
            invokestatic org.bouncycastle.asn1.ASN1Primitive.fromByteArray:([B)Lorg/bouncycastle/asn1/ASN1Primitive;
            invokestatic org.bouncycastle.asn1.ASN1GeneralizedTime.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1GeneralizedTime;
            astore 3 /* dateOfCertgen */
        end local 4 // byte[] extBytes
         8: .line 853
            goto 17
         9: .line 854
      StackMap locals: org.bouncycastle.jcajce.PKIXExtendedParameters java.security.cert.CertPath int org.bouncycastle.asn1.ASN1GeneralizedTime
      StackMap stack: java.io.IOException
            pop
        10: .line 856
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        11: .line 857
            ldc "Date of cert gen extension could not be read."
        12: .line 856
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        13: .line 859
      StackMap locals:
      StackMap stack: java.lang.IllegalArgumentException
            pop
        14: .line 861
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        15: .line 862
            ldc "Date of cert gen extension could not be read."
        16: .line 861
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        17: .line 864
      StackMap locals:
      StackMap stack:
            aload 3 /* dateOfCertgen */
            ifnull 25
        18: .line 868
            aload 3 /* dateOfCertgen */
            invokevirtual org.bouncycastle.asn1.ASN1GeneralizedTime.getDate:()Ljava/util/Date;
        19: areturn
        20: .line 870
      StackMap locals:
      StackMap stack: java.text.ParseException
            astore 4 /* e */
        start local 4 // java.text.ParseException e
        21: .line 872
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        22: .line 873
            ldc "Date from date of cert gen extension could not be parsed."
        23: .line 874
            aload 4 /* e */
        24: .line 872
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.text.ParseException e
        25: .line 877
      StackMap locals:
      StackMap stack:
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
        26: .line 878
            iload 2 /* index */
            iconst_1
            isub
        27: .line 877
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
        28: .line 878
            invokevirtual java.security.cert.X509Certificate.getNotBefore:()Ljava/util/Date;
        29: .line 877
            areturn
        end local 3 // org.bouncycastle.asn1.ASN1GeneralizedTime dateOfCertgen
        30: .line 882
      StackMap locals:
      StackMap stack:
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
        31: .line 883
            iload 2 /* index */
            iconst_1
            isub
        32: .line 882
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
        33: .line 883
            invokevirtual java.security.cert.X509Certificate.getNotBefore:()Ljava/util/Date;
        34: .line 882
            areturn
        35: .line 889
      StackMap locals:
      StackMap stack:
            aload 0 /* paramsPKIX */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getValidDate:(Lorg/bouncycastle/jcajce/PKIXExtendedParameters;)Ljava/util/Date;
            areturn
        end local 2 // int index
        end local 1 // java.security.cert.CertPath certPath
        end local 0 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   36     0     paramsPKIX  Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            0   36     1       certPath  Ljava/security/cert/CertPath;
            0   36     2          index  I
            5   30     3  dateOfCertgen  Lorg/bouncycastle/asn1/ASN1GeneralizedTime;
            6    8     4       extBytes  [B
           21   25     4              e  Ljava/text/ParseException;
      Exception table:
        from    to  target  type
           5     8       9  Class java.io.IOException
           5     8      13  Class java.lang.IllegalArgumentException
          18    19      20  Class java.text.ParseException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    MethodParameters:
            Name  Flags
      paramsPKIX  
      certPath    
      index       

  protected static java.security.PublicKey getNextWorkingKey(java.util.List, int, org.bouncycastle.jcajce.util.JcaJceHelper);
    descriptor: (Ljava/util/List;ILorg/bouncycastle/jcajce/util/JcaJceHelper;)Ljava/security/PublicKey;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=6, locals=12, args_size=3
        start local 0 // java.util.List certs
        start local 1 // int index
        start local 2 // org.bouncycastle.jcajce.util.JcaJceHelper helper
         0: .line 917
            aload 0 /* certs */
            iload 1 /* index */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.Certificate
            astore 3 /* cert */
        start local 3 // java.security.cert.Certificate cert
         1: .line 918
            aload 3 /* cert */
            invokevirtual java.security.cert.Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 4 /* pubKey */
        start local 4 // java.security.PublicKey pubKey
         2: .line 919
            aload 4 /* pubKey */
            instanceof java.security.interfaces.DSAPublicKey
            ifne 4
         3: .line 921
            aload 4 /* pubKey */
            areturn
         4: .line 923
      StackMap locals: java.security.cert.Certificate java.security.PublicKey
      StackMap stack:
            aload 4 /* pubKey */
            checkcast java.security.interfaces.DSAPublicKey
            astore 5 /* dsaPubKey */
        start local 5 // java.security.interfaces.DSAPublicKey dsaPubKey
         5: .line 924
            aload 5 /* dsaPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            ifnull 7
         6: .line 926
            aload 5 /* dsaPubKey */
            areturn
         7: .line 928
      StackMap locals: java.security.interfaces.DSAPublicKey
      StackMap stack:
            iload 1 /* index */
            iconst_1
            iadd
            istore 6 /* i */
        start local 6 // int i
         8: goto 28
         9: .line 930
      StackMap locals: int
      StackMap stack:
            aload 0 /* certs */
            iload 6 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 7 /* parentCert */
        start local 7 // java.security.cert.X509Certificate parentCert
        10: .line 931
            aload 7 /* parentCert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 4 /* pubKey */
        11: .line 932
            aload 4 /* pubKey */
            instanceof java.security.interfaces.DSAPublicKey
            ifne 15
        12: .line 934
            new java.security.cert.CertPathValidatorException
            dup
        13: .line 935
            ldc "DSA parameters cannot be inherited from previous certificate."
        14: .line 934
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        15: .line 937
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 4 /* pubKey */
            checkcast java.security.interfaces.DSAPublicKey
            astore 8 /* prevDSAPubKey */
        start local 8 // java.security.interfaces.DSAPublicKey prevDSAPubKey
        16: .line 938
            aload 8 /* prevDSAPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            ifnonnull 18
        17: .line 940
            goto 27
        18: .line 942
      StackMap locals: java.security.interfaces.DSAPublicKey
      StackMap stack:
            aload 8 /* prevDSAPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            astore 9 /* dsaParams */
        start local 9 // java.security.interfaces.DSAParams dsaParams
        19: .line 943
            new java.security.spec.DSAPublicKeySpec
            dup
        20: .line 944
            aload 5 /* dsaPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getY:()Ljava/math/BigInteger;
            aload 9 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getP:()Ljava/math/BigInteger;
            aload 9 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getQ:()Ljava/math/BigInteger;
            aload 9 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getG:()Ljava/math/BigInteger;
        21: .line 943
            invokespecial java.security.spec.DSAPublicKeySpec.<init>:(Ljava/math/BigInteger;Ljava/math/BigInteger;Ljava/math/BigInteger;Ljava/math/BigInteger;)V
            astore 10 /* dsaPubKeySpec */
        start local 10 // java.security.spec.DSAPublicKeySpec dsaPubKeySpec
        22: .line 947
            aload 2 /* helper */
            ldc "DSA"
            invokeinterface org.bouncycastle.jcajce.util.JcaJceHelper.createKeyFactory:(Ljava/lang/String;)Ljava/security/KeyFactory;
            astore 11 /* keyFactory */
        start local 11 // java.security.KeyFactory keyFactory
        23: .line 948
            aload 11 /* keyFactory */
            aload 10 /* dsaPubKeySpec */
            invokevirtual java.security.KeyFactory.generatePublic:(Ljava/security/spec/KeySpec;)Ljava/security/PublicKey;
        24: areturn
        end local 11 // java.security.KeyFactory keyFactory
        25: .line 950
      StackMap locals: java.util.List int org.bouncycastle.jcajce.util.JcaJceHelper java.security.cert.Certificate java.security.PublicKey java.security.interfaces.DSAPublicKey int java.security.cert.X509Certificate java.security.interfaces.DSAPublicKey java.security.interfaces.DSAParams java.security.spec.DSAPublicKeySpec
      StackMap stack: java.lang.Exception
            astore 11 /* exception */
        start local 11 // java.lang.Exception exception
        26: .line 952
            new java.lang.RuntimeException
            dup
            aload 11 /* exception */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;)V
            athrow
        end local 11 // java.lang.Exception exception
        end local 10 // java.security.spec.DSAPublicKeySpec dsaPubKeySpec
        end local 9 // java.security.interfaces.DSAParams dsaParams
        end local 8 // java.security.interfaces.DSAPublicKey prevDSAPubKey
        end local 7 // java.security.cert.X509Certificate parentCert
        27: .line 928
      StackMap locals: java.util.List int org.bouncycastle.jcajce.util.JcaJceHelper java.security.cert.Certificate java.security.PublicKey java.security.interfaces.DSAPublicKey int
      StackMap stack:
            iinc 6 /* i */ 1
      StackMap locals:
      StackMap stack:
        28: iload 6 /* i */
            aload 0 /* certs */
            invokeinterface java.util.List.size:()I
            if_icmplt 9
        end local 6 // int i
        29: .line 955
            new java.security.cert.CertPathValidatorException
            dup
            ldc "DSA parameters cannot be inherited from previous certificate."
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        end local 5 // java.security.interfaces.DSAPublicKey dsaPubKey
        end local 4 // java.security.PublicKey pubKey
        end local 3 // java.security.cert.Certificate cert
        end local 2 // org.bouncycastle.jcajce.util.JcaJceHelper helper
        end local 1 // int index
        end local 0 // java.util.List certs
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   30     0          certs  Ljava/util/List;
            0   30     1          index  I
            0   30     2         helper  Lorg/bouncycastle/jcajce/util/JcaJceHelper;
            1   30     3           cert  Ljava/security/cert/Certificate;
            2   30     4         pubKey  Ljava/security/PublicKey;
            5   30     5      dsaPubKey  Ljava/security/interfaces/DSAPublicKey;
            8   29     6              i  I
           10   27     7     parentCert  Ljava/security/cert/X509Certificate;
           16   27     8  prevDSAPubKey  Ljava/security/interfaces/DSAPublicKey;
           19   27     9      dsaParams  Ljava/security/interfaces/DSAParams;
           22   27    10  dsaPubKeySpec  Ljava/security/spec/DSAPublicKeySpec;
           23   25    11     keyFactory  Ljava/security/KeyFactory;
           26   27    11      exception  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
          22    24      25  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
        Name  Flags
      certs   
      index   
      helper  

  static java.util.Collection findIssuerCerts(java.security.cert.X509Certificate, java.util.List<java.security.cert.CertStore>, java.util.List<org.bouncycastle.jcajce.PKIXCertStore>);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/List;Ljava/util/List;)Ljava/util/Collection;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=8, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.List certStores
        start local 2 // java.util.List pkixCertStores
         0: .line 972
            new java.security.cert.X509CertSelector
            dup
            invokespecial java.security.cert.X509CertSelector.<init>:()V
            astore 3 /* selector */
        start local 3 // java.security.cert.X509CertSelector selector
         1: .line 976
            aload 3 /* selector */
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokevirtual java.security.cert.X509CertSelector.setSubject:([B)V
         2: .line 977
            goto 7
         3: .line 978
      StackMap locals: java.security.cert.X509Certificate java.util.List java.util.List java.security.cert.X509CertSelector
      StackMap stack: java.io.IOException
            astore 4 /* e */
        start local 4 // java.io.IOException e
         4: .line 980
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
         5: .line 981
            ldc "Subject criteria for certificate selector to find issuer certificate could not be set."
            aload 4 /* e */
         6: .line 980
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.io.IOException e
         7: .line 986
      StackMap locals:
      StackMap stack:
            aload 0 /* cert */
            getstatic org.bouncycastle.pkix.jcajce.RevocationUtilities.AUTHORITY_KEY_IDENTIFIER:Ljava/lang/String;
            invokevirtual java.security.cert.X509Certificate.getExtensionValue:(Ljava/lang/String;)[B
            astore 4 /* akiExtensionValue */
        start local 4 // byte[] akiExtensionValue
         8: .line 987
            aload 4 /* akiExtensionValue */
            ifnull 15
         9: .line 989
            aload 4 /* akiExtensionValue */
            invokestatic org.bouncycastle.asn1.ASN1OctetString.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1OctetString;
            astore 5 /* aki */
        start local 5 // org.bouncycastle.asn1.ASN1OctetString aki
        10: .line 990
            aload 5 /* aki */
            invokevirtual org.bouncycastle.asn1.ASN1OctetString.getOctets:()[B
            invokestatic org.bouncycastle.asn1.x509.AuthorityKeyIdentifier.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/AuthorityKeyIdentifier;
            invokevirtual org.bouncycastle.asn1.x509.AuthorityKeyIdentifier.getKeyIdentifier:()[B
            astore 6 /* authorityKeyIdentifier */
        start local 6 // byte[] authorityKeyIdentifier
        11: .line 991
            aload 6 /* authorityKeyIdentifier */
            ifnull 15
        12: .line 993
            aload 3 /* selector */
            new org.bouncycastle.asn1.DEROctetString
            dup
            aload 6 /* authorityKeyIdentifier */
            invokespecial org.bouncycastle.asn1.DEROctetString.<init>:([B)V
            invokevirtual org.bouncycastle.asn1.DEROctetString.getEncoded:()[B
            invokevirtual java.security.cert.X509CertSelector.setSubjectKeyIdentifier:([B)V
        end local 6 // byte[] authorityKeyIdentifier
        end local 5 // org.bouncycastle.asn1.ASN1OctetString aki
        end local 4 // byte[] akiExtensionValue
        13: .line 996
            goto 15
        14: .line 997
      StackMap locals:
      StackMap stack: java.lang.Exception
            pop
        15: .line 1002
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.jcajce.PKIXCertStoreSelector$Builder
            dup
            aload 3 /* selector */
            invokespecial org.bouncycastle.jcajce.PKIXCertStoreSelector$Builder.<init>:(Ljava/security/cert/CertSelector;)V
            invokevirtual org.bouncycastle.jcajce.PKIXCertStoreSelector$Builder.build:()Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;
            astore 4 /* certSelect */
        start local 4 // org.bouncycastle.jcajce.PKIXCertStoreSelector certSelect
        16: .line 1003
            new java.util.LinkedHashSet
            dup
            invokespecial java.util.LinkedHashSet.<init>:()V
            astore 5 /* certs */
        start local 5 // java.util.Set certs
        17: .line 1009
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 7 /* matches */
        start local 7 // java.util.List matches
        18: .line 1011
            aload 7 /* matches */
            aload 4 /* certSelect */
            aload 1 /* certStores */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.findCertificates:(Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        19: .line 1012
            aload 7 /* matches */
            aload 4 /* certSelect */
            aload 2 /* pkixCertStores */
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.findCertificates:(Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        20: .line 1014
            aload 7 /* matches */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 6 /* iter */
        end local 7 // java.util.List matches
        start local 6 // java.util.Iterator iter
        21: .line 1015
            goto 24
        end local 6 // java.util.Iterator iter
        22: .line 1016
      StackMap locals: java.security.cert.X509Certificate java.util.List java.util.List java.security.cert.X509CertSelector org.bouncycastle.jcajce.PKIXCertStoreSelector java.util.Set
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 7 /* e */
        start local 7 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        23: .line 1018
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "Issuer certificate cannot be searched."
            aload 7 /* e */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 7 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        start local 6 // java.util.Iterator iter
        24: .line 1021
      StackMap locals: java.util.Iterator
      StackMap stack:
            aconst_null
            astore 7 /* issuer */
        start local 7 // java.security.cert.X509Certificate issuer
        25: .line 1022
            goto 28
        26: .line 1024
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 6 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 7 /* issuer */
        27: .line 1027
            aload 5 /* certs */
            aload 7 /* issuer */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        28: .line 1022
      StackMap locals:
      StackMap stack:
            aload 6 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 26
        29: .line 1029
            aload 5 /* certs */
            areturn
        end local 7 // java.security.cert.X509Certificate issuer
        end local 6 // java.util.Iterator iter
        end local 5 // java.util.Set certs
        end local 4 // org.bouncycastle.jcajce.PKIXCertStoreSelector certSelect
        end local 3 // java.security.cert.X509CertSelector selector
        end local 2 // java.util.List pkixCertStores
        end local 1 // java.util.List certStores
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot                    Name  Signature
            0   30     0                    cert  Ljava/security/cert/X509Certificate;
            0   30     1              certStores  Ljava/util/List<Ljava/security/cert/CertStore;>;
            0   30     2          pkixCertStores  Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCertStore;>;
            1   30     3                selector  Ljava/security/cert/X509CertSelector;
            4    7     4                       e  Ljava/io/IOException;
            8   13     4       akiExtensionValue  [B
           10   13     5                     aki  Lorg/bouncycastle/asn1/ASN1OctetString;
           11   13     6  authorityKeyIdentifier  [B
           16   30     4              certSelect  Lorg/bouncycastle/jcajce/PKIXCertStoreSelector;
           17   30     5                   certs  Ljava/util/Set;
           21   22     6                    iter  Ljava/util/Iterator;
           24   30     6                    iter  Ljava/util/Iterator;
           18   21     7                 matches  Ljava/util/List;
           23   24     7                       e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           25   30     7                  issuer  Ljava/security/cert/X509Certificate;
      Exception table:
        from    to  target  type
           1     2       3  Class java.io.IOException
           7    13      14  Class java.lang.Exception
          17    21      22  Class org.bouncycastle.pkix.jcajce.AnnotatedException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    Signature: (Ljava/security/cert/X509Certificate;Ljava/util/List<Ljava/security/cert/CertStore;>;Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCertStore;>;)Ljava/util/Collection;
    MethodParameters:
                Name  Flags
      cert            
      certStores      
      pkixCertStores  

  protected static void verifyX509Certificate(java.security.cert.X509Certificate, java.security.PublicKey, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=3, locals=3, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.security.PublicKey publicKey
        start local 2 // java.lang.String sigProvider
         0: .line 1036
            aload 2 /* sigProvider */
            ifnonnull 3
         1: .line 1038
            aload 0 /* cert */
            aload 1 /* publicKey */
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;)V
         2: .line 1039
            goto 4
         3: .line 1042
      StackMap locals:
      StackMap stack:
            aload 0 /* cert */
            aload 1 /* publicKey */
            aload 2 /* sigProvider */
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;Ljava/lang/String;)V
         4: .line 1044
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String sigProvider
        end local 1 // java.security.PublicKey publicKey
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0    5     0         cert  Ljava/security/cert/X509Certificate;
            0    5     1    publicKey  Ljava/security/PublicKey;
            0    5     2  sigProvider  Ljava/lang/String;
    Exceptions:
      throws java.security.GeneralSecurityException
    MethodParameters:
             Name  Flags
      cert         
      publicKey    
      sigProvider  

  static void checkCRLsNotEmpty(java.util.Set, java.lang.Object);
    descriptor: (Ljava/util/Set;Ljava/lang/Object;)V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=5, locals=3, args_size=2
        start local 0 // java.util.Set crls
        start local 1 // java.lang.Object cert
         0: .line 1049
            aload 0 /* crls */
            invokeinterface java.util.Set.isEmpty:()Z
            ifeq 3
         1: .line 1059
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 2 /* xCert */
        start local 2 // java.security.cert.X509Certificate xCert
         2: .line 1061
            new org.bouncycastle.pkix.jcajce.CRLNotFoundException
            dup
            new java.lang.StringBuilder
            dup
            ldc "No CRLs found for issuer \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            getstatic org.bouncycastle.asn1.x500.style.RFC4519Style.INSTANCE:Lorg/bouncycastle/asn1/x500/X500NameStyle;
            aload 2 /* xCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokeinterface org.bouncycastle.asn1.x500.X500NameStyle.toString:(Lorg/bouncycastle/asn1/x500/X500Name;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial org.bouncycastle.pkix.jcajce.CRLNotFoundException.<init>:(Ljava/lang/String;)V
            athrow
        end local 2 // java.security.cert.X509Certificate xCert
         3: .line 1064
      StackMap locals:
      StackMap stack:
            return
        end local 1 // java.lang.Object cert
        end local 0 // java.util.Set crls
      LocalVariableTable:
        Start  End  Slot   Name  Signature
            0    4     0   crls  Ljava/util/Set;
            0    4     1   cert  Ljava/lang/Object;
            2    3     2  xCert  Ljava/security/cert/X509Certificate;
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.CRLNotFoundException
    MethodParameters:
      Name  Flags
      crls  
      cert  

  public static boolean isIndirectCRL(java.security.cert.X509CRL);
    descriptor: (Ljava/security/cert/X509CRL;)Z
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=4, locals=2, args_size=1
        start local 0 // java.security.cert.X509CRL crl
         0: .line 1071
            aload 0 /* crl */
            getstatic org.bouncycastle.asn1.x509.Extension.issuingDistributionPoint:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            invokevirtual java.security.cert.X509CRL.getExtensionValue:(Ljava/lang/String;)[B
            astore 1 /* idp */
        start local 1 // byte[] idp
         1: .line 1072
            aload 1 /* idp */
            ifnull 4
         2: .line 1073
            aload 1 /* idp */
            invokestatic org.bouncycastle.asn1.ASN1OctetString.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1OctetString;
            invokevirtual org.bouncycastle.asn1.ASN1OctetString.getOctets:()[B
            invokestatic org.bouncycastle.asn1.x509.IssuingDistributionPoint.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/IssuingDistributionPoint;
            invokevirtual org.bouncycastle.asn1.x509.IssuingDistributionPoint.isIndirectCRL:()Z
            ifeq 4
         3: .line 1072
            iconst_1
            ireturn
      StackMap locals: byte[]
      StackMap stack:
         4: iconst_0
         5: ireturn
        end local 1 // byte[] idp
         6: .line 1075
      StackMap locals: java.security.cert.X509CRL
      StackMap stack: java.lang.Exception
            astore 1 /* e */
        start local 1 // java.lang.Exception e
         7: .line 1077
            new java.security.cert.CRLException
            dup
         8: .line 1078
            ldc "exception reading IssuingDistributionPoint"
            aload 1 /* e */
         9: .line 1077
            invokespecial java.security.cert.CRLException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 1 // java.lang.Exception e
        end local 0 // java.security.cert.X509CRL crl
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   10     0   crl  Ljava/security/cert/X509CRL;
            1    6     1   idp  [B
            7   10     1     e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0     5       6  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CRLException
    MethodParameters:
      Name  Flags
      crl   
}
SourceFile: "RevocationUtilities.java"
InnerClasses:
  public Builder = org.bouncycastle.jcajce.PKIXCRLStoreSelector$Builder of org.bouncycastle.jcajce.PKIXCRLStoreSelector
  public Builder = org.bouncycastle.jcajce.PKIXCertStoreSelector$Builder of org.bouncycastle.jcajce.PKIXCertStoreSelector