http://www.bouncycastle.org/java.html: The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.
  • The Legion of the Bouncy Castle Inc. 
public class org.bouncycastle.pkix.jcajce.X509RevocationChecker extends java.security.cert.PKIXCertPathChecker
  minor version: 0
  major version: 59
  flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
  this_class: org.bouncycastle.pkix.jcajce.X509RevocationChecker
  super_class: java.security.cert.PKIXCertPathChecker
{
  public static final int PKIX_VALIDITY_MODEL;
    descriptor: I
    flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
    ConstantValue: 0

  public static final int CHAIN_VALIDITY_MODEL;
    descriptor: I
    flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
    ConstantValue: 1

  private static java.util.logging.Logger LOG;
    descriptor: Ljava/util/logging/Logger;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC

  private static final java.util.Map<org.bouncycastle.asn1.x509.GeneralName, java.lang.ref.WeakReference<java.security.cert.X509CRL>> crlCache;
    descriptor: Ljava/util/Map;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    Signature: Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Ljava/lang/ref/WeakReference<Ljava/security/cert/X509CRL;>;>;

  private final java.util.Map<javax.security.auth.x500.X500Principal, java.lang.Long> failures;
    descriptor: Ljava/util/Map;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/Map<Ljavax/security/auth/x500/X500Principal;Ljava/lang/Long;>;

  private final java.util.Set<java.security.cert.TrustAnchor> trustAnchors;
    descriptor: Ljava/util/Set;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/Set<Ljava/security/cert/TrustAnchor;>;

  private final boolean isCheckEEOnly;
    descriptor: Z
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final java.util.List<org.bouncycastle.util.Store<java.security.cert.CRL>> crls;
    descriptor: Ljava/util/List;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/List<Lorg/bouncycastle/util/Store<Ljava/security/cert/CRL;>;>;

  private final java.util.List<java.security.cert.CertStore> crlCertStores;
    descriptor: Ljava/util/List;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL
    Signature: Ljava/util/List<Ljava/security/cert/CertStore;>;

  private final org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper helper;
    descriptor: Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final boolean canSoftFail;
    descriptor: Z
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final long failLogMaxTime;
    descriptor: J
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private final long failHardMaxTime;
    descriptor: J
    flags: (0x0012) ACC_PRIVATE, ACC_FINAL

  private javax.security.auth.x500.X500Principal workingIssuerName;
    descriptor: Ljavax/security/auth/x500/X500Principal;
    flags: (0x0002) ACC_PRIVATE

  private java.security.PublicKey workingPublicKey;
    descriptor: Ljava/security/PublicKey;
    flags: (0x0002) ACC_PRIVATE

  private java.security.cert.X509Certificate signingCert;
    descriptor: Ljava/security/cert/X509Certificate;
    flags: (0x0002) ACC_PRIVATE

  protected static final java.lang.String[] crlReasons;
    descriptor: [Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 260
            ldc Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            invokevirtual java.lang.Class.getName:()Ljava/lang/String;
            invokestatic java.util.logging.Logger.getLogger:(Ljava/lang/String;)Ljava/util/logging/Logger;
            putstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
         1: .line 262
            new java.util.WeakHashMap
            dup
            invokespecial java.util.WeakHashMap.<init>:()V
         2: .line 261
            invokestatic java.util.Collections.synchronizedMap:(Ljava/util/Map;)Ljava/util/Map;
            putstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCache:Ljava/util/Map;
         3: .line 610
            bipush 11
            anewarray java.lang.String
            dup
            iconst_0
         4: .line 611
            ldc "unspecified"
            aastore
            dup
            iconst_1
         5: .line 612
            ldc "keyCompromise"
            aastore
            dup
            iconst_2
         6: .line 613
            ldc "cACompromise"
            aastore
            dup
            iconst_3
         7: .line 614
            ldc "affiliationChanged"
            aastore
            dup
            iconst_4
         8: .line 615
            ldc "superseded"
            aastore
            dup
            iconst_5
         9: .line 616
            ldc "cessationOfOperation"
            aastore
            dup
            bipush 6
        10: .line 617
            ldc "certificateHold"
            aastore
            dup
            bipush 7
        11: .line 618
            ldc "unknown"
            aastore
            dup
            bipush 8
        12: .line 619
            ldc "removeFromCRL"
            aastore
            dup
            bipush 9
        13: .line 620
            ldc "privilegeWithdrawn"
            aastore
            dup
            bipush 10
        14: .line 621
            ldc "aACompromise"
            aastore
        15: .line 610
            putstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlReasons:[Ljava/lang/String;
        16: .line 621
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  private void <init>(org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder);
    descriptor: (Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker$Builder;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=4, locals=2, args_size=2
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder bldr
         0: .line 278
            aload 0 /* this */
            invokespecial java.security.cert.PKIXCertPathChecker.<init>:()V
         1: .line 264
            aload 0 /* this */
            new java.util.HashMap
            dup
            invokespecial java.util.HashMap.<init>:()V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failures:Ljava/util/Map;
         2: .line 280
            aload 0 /* this */
            new java.util.ArrayList
            dup
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.crls:Ljava/util/List;
            invokespecial java.util.ArrayList.<init>:(Ljava/util/Collection;)V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crls:Ljava/util/List;
         3: .line 281
            aload 0 /* this */
            new java.util.ArrayList
            dup
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.crlCertStores:Ljava/util/List;
            invokespecial java.util.ArrayList.<init>:(Ljava/util/Collection;)V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCertStores:Ljava/util/List;
         4: .line 282
            aload 0 /* this */
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.isCheckEEOnly:Z
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.isCheckEEOnly:Z
         5: .line 283
            aload 0 /* this */
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.trustAnchors:Ljava/util/Set;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.trustAnchors:Ljava/util/Set;
         6: .line 284
            aload 0 /* this */
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.canSoftFail:Z
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.canSoftFail:Z
         7: .line 285
            aload 0 /* this */
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.failLogMaxTime:J
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failLogMaxTime:J
         8: .line 286
            aload 0 /* this */
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.failHardMaxTime:J
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failHardMaxTime:J
         9: .line 288
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.provider:Ljava/security/Provider;
            ifnull 12
        10: .line 290
            aload 0 /* this */
            new org.bouncycastle.pkix.jcajce.PKIXProviderJcaJceHelper
            dup
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.provider:Ljava/security/Provider;
            invokespecial org.bouncycastle.pkix.jcajce.PKIXProviderJcaJceHelper.<init>:(Ljava/security/Provider;)V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
        11: .line 291
            goto 16
        12: .line 292
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder
      StackMap stack:
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.providerName:Ljava/lang/String;
            ifnull 15
        13: .line 294
            aload 0 /* this */
            new org.bouncycastle.pkix.jcajce.PKIXNamedJcaJceHelper
            dup
            aload 1 /* bldr */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder.providerName:Ljava/lang/String;
            invokespecial org.bouncycastle.pkix.jcajce.PKIXNamedJcaJceHelper.<init>:(Ljava/lang/String;)V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
        14: .line 295
            goto 16
        15: .line 298
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            new org.bouncycastle.pkix.jcajce.PKIXDefaultJcaJceHelper
            dup
            invokespecial org.bouncycastle.pkix.jcajce.PKIXDefaultJcaJceHelper.<init>:()V
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
        16: .line 300
      StackMap locals:
      StackMap stack:
            return
        end local 1 // org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder bldr
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   17     0  this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0   17     1  bldr  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker$Builder;
    MethodParameters:
      Name  Flags
      bldr  

  public void init(boolean);
    descriptor: (Z)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // boolean forward
         0: .line 305
            iload 1 /* forward */
            ifeq 2
         1: .line 307
            new java.lang.IllegalArgumentException
            dup
            ldc "forward processing not supported"
            invokespecial java.lang.IllegalArgumentException.<init>:(Ljava/lang/String;)V
            athrow
         2: .line 309
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aconst_null
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
         3: .line 310
            return
        end local 1 // boolean forward
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0    4     0     this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0    4     1  forward  Z
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
         Name  Flags
      forward  

  public boolean isForwardCheckingSupported();
    descriptor: ()Z
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
         0: .line 314
            iconst_0
            ireturn
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;

  public java.util.Set<java.lang.String> getSupportedExtensions();
    descriptor: ()Ljava/util/Set;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
         0: .line 319
            aconst_null
            areturn
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
    Signature: ()Ljava/util/Set<Ljava/lang/String;>;

  public void check(java.security.cert.Certificate, java.util.Collection<java.lang.String>);
    descriptor: (Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=8, locals=14, args_size=3
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // java.security.cert.Certificate certificate
        start local 2 // java.util.Collection collection
         0: .line 325
            aload 1 /* certificate */
            checkcast java.security.cert.X509Certificate
            astore 3 /* cert */
        start local 3 // java.security.cert.X509Certificate cert
         1: .line 327
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.isCheckEEOnly:Z
            ifeq 6
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            iconst_m1
            if_icmpeq 6
         2: .line 329
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
         3: .line 330
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingPublicKey:Ljava/security/PublicKey;
         4: .line 331
            aload 0 /* this */
            aload 3 /* cert */
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
         5: .line 333
            return
         6: .line 336
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aconst_null
            astore 4 /* trustAnchor */
        start local 4 // java.security.cert.TrustAnchor trustAnchor
         7: .line 338
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
            ifnonnull 20
         8: .line 340
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
         9: .line 342
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.trustAnchors:Ljava/util/Set;
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 5 /* it */
        start local 5 // java.util.Iterator it
        10: goto 15
        11: .line 344
      StackMap locals: java.security.cert.TrustAnchor java.util.Iterator
      StackMap stack:
            aload 5 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 6 /* anchor */
        start local 6 // java.security.cert.TrustAnchor anchor
        12: .line 346
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
            aload 6 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getCA:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifne 14
        13: .line 347
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
            aload 6 /* anchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifeq 15
        14: .line 349
      StackMap locals: java.security.cert.TrustAnchor
      StackMap stack:
            aload 6 /* anchor */
            astore 4 /* trustAnchor */
        end local 6 // java.security.cert.TrustAnchor anchor
        15: .line 342
      StackMap locals:
      StackMap stack:
            aload 5 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 11
        end local 5 // java.util.Iterator it
        16: .line 353
            aload 4 /* trustAnchor */
            ifnonnull 18
        17: .line 355
            new java.security.cert.CertPathValidatorException
            dup
            new java.lang.StringBuilder
            dup
            ldc "no trust anchor found for "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        18: .line 358
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 4 /* trustAnchor */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
        19: .line 359
            aload 0 /* this */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingPublicKey:Ljava/security/PublicKey;
        20: .line 363
      StackMap locals:
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 6 /* issuerList */
        start local 6 // java.util.List issuerList
        21: .line 367
            new java.security.cert.PKIXParameters
            dup
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.trustAnchors:Ljava/util/Set;
            invokespecial java.security.cert.PKIXParameters.<init>:(Ljava/util/Set;)V
            astore 5 /* baseParams */
        start local 5 // java.security.cert.PKIXParameters baseParams
        22: .line 369
            aload 5 /* baseParams */
            iconst_0
            invokevirtual java.security.cert.PKIXParameters.setRevocationEnabled:(Z)V
        23: .line 370
            aload 5 /* baseParams */
            new java.util.Date
            dup
            invokespecial java.util.Date.<init>:()V
            invokevirtual java.security.cert.PKIXParameters.setDate:(Ljava/util/Date;)V
        24: .line 372
            iconst_0
            istore 7 /* i */
        start local 7 // int i
        25: goto 30
        26: .line 374
      StackMap locals: java.security.cert.PKIXParameters java.util.List int
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            invokevirtual java.util.logging.Logger.isLoggable:(Ljava/util/logging/Level;)Z
            ifeq 28
        27: .line 376
            aload 0 /* this */
            aload 6 /* issuerList */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCertStores:Ljava/util/List;
            iload 7 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.CertStore
            invokevirtual org.bouncycastle.pkix.jcajce.X509RevocationChecker.addIssuers:(Ljava/util/List;Ljava/security/cert/CertStore;)V
        28: .line 378
      StackMap locals:
      StackMap stack:
            aload 5 /* baseParams */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCertStores:Ljava/util/List;
            iload 7 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.CertStore
            invokevirtual java.security.cert.PKIXParameters.addCertStore:(Ljava/security/cert/CertStore;)V
        29: .line 372
            iinc 7 /* i */ 1
      StackMap locals:
      StackMap stack:
        30: iload 7 /* i */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCertStores:Ljava/util/List;
            invokeinterface java.util.List.size:()I
            if_icmpne 26
        end local 7 // int i
        31: .line 380
            goto 34
        end local 5 // java.security.cert.PKIXParameters baseParams
        32: .line 381
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker java.security.cert.Certificate java.util.Collection java.security.cert.X509Certificate java.security.cert.TrustAnchor top java.util.List
      StackMap stack: java.security.GeneralSecurityException
            astore 7 /* e */
        start local 7 // java.security.GeneralSecurityException e
        33: .line 383
            new java.lang.RuntimeException
            dup
            new java.lang.StringBuilder
            dup
            ldc "error setting up baseParams: "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 7 /* e */
            invokevirtual java.security.GeneralSecurityException.getMessage:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;)V
            athrow
        end local 7 // java.security.GeneralSecurityException e
        start local 5 // java.security.cert.PKIXParameters baseParams
        34: .line 386
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker java.security.cert.Certificate java.util.Collection java.security.cert.X509Certificate java.security.cert.TrustAnchor java.security.cert.PKIXParameters java.util.List
      StackMap stack:
            new org.bouncycastle.jcajce.PKIXExtendedParameters$Builder
            dup
            aload 5 /* baseParams */
            invokespecial org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.<init>:(Ljava/security/cert/PKIXParameters;)V
            astore 7 /* pkixParamsBldr */
        start local 7 // org.bouncycastle.jcajce.PKIXExtendedParameters$Builder pkixParamsBldr
        35: .line 388
            iconst_0
            istore 8 /* i */
        start local 8 // int i
        36: goto 41
        37: .line 390
      StackMap locals: org.bouncycastle.jcajce.PKIXExtendedParameters$Builder int
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            invokevirtual java.util.logging.Logger.isLoggable:(Ljava/util/logging/Level;)Z
            ifeq 39
        38: .line 392
            aload 0 /* this */
            aload 6 /* issuerList */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crls:Ljava/util/List;
            iload 8 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast org.bouncycastle.util.Store
            invokevirtual org.bouncycastle.pkix.jcajce.X509RevocationChecker.addIssuers:(Ljava/util/List;Lorg/bouncycastle/util/Store;)V
        39: .line 394
      StackMap locals:
      StackMap stack:
            aload 7 /* pkixParamsBldr */
            new org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore
            dup
            aload 0 /* this */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crls:Ljava/util/List;
            iload 8 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast org.bouncycastle.util.Store
            invokespecial org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore.<init>:(Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;Lorg/bouncycastle/util/Store;)V
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.addCRLStore:(Lorg/bouncycastle/jcajce/PKIXCRLStore;)Lorg/bouncycastle/jcajce/PKIXExtendedParameters$Builder;
            pop
        40: .line 388
            iinc 8 /* i */ 1
      StackMap locals:
      StackMap stack:
        41: iload 8 /* i */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.crls:Ljava/util/List;
            invokeinterface java.util.List.size:()I
            if_icmpne 37
        end local 8 // int i
        42: .line 397
            aload 6 /* issuerList */
            invokeinterface java.util.List.isEmpty:()Z
            ifeq 45
        43: .line 399
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            ldc "configured with 0 pre-loaded CRLs"
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        44: .line 400
            goto 53
        45: .line 403
      StackMap locals:
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.FINE:Ljava/util/logging/Level;
            invokevirtual java.util.logging.Logger.isLoggable:(Ljava/util/logging/Level;)Z
            ifeq 52
        46: .line 405
            iconst_0
            istore 8 /* i */
        start local 8 // int i
        47: goto 50
        48: .line 407
      StackMap locals: int
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.FINE:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "configuring with CRL for issuer \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 6 /* issuerList */
            iload 8 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        49: .line 405
            iinc 8 /* i */ 1
      StackMap locals:
      StackMap stack:
        50: iload 8 /* i */
            aload 6 /* issuerList */
            invokeinterface java.util.List.size:()I
            if_icmpne 48
        end local 8 // int i
        51: .line 409
            goto 53
        52: .line 412
      StackMap locals:
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "configured with "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 6 /* issuerList */
            invokeinterface java.util.List.size:()I
            invokevirtual java.lang.StringBuilder.append:(I)Ljava/lang/StringBuilder;
            ldc " pre-loaded CRLs"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        53: .line 418
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 7 /* pkixParamsBldr */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.build:()Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            aload 3 /* cert */
            aload 5 /* baseParams */
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingPublicKey:Ljava/security/PublicKey;
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
            invokevirtual org.bouncycastle.pkix.jcajce.X509RevocationChecker.checkCRLs:(Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/List;Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;)V
        54: .line 419
            goto 88
        55: .line 420
      StackMap locals:
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 8 /* e */
        start local 8 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        56: .line 422
            new java.security.cert.CertPathValidatorException
            dup
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.AnnotatedException.getMessage:()Ljava/lang/String;
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.AnnotatedException.getCause:()Ljava/lang/Throwable;
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 8 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        57: .line 424
      StackMap locals:
      StackMap stack: org.bouncycastle.pkix.jcajce.CRLNotFoundException
            astore 8 /* e */
        start local 8 // org.bouncycastle.pkix.jcajce.CRLNotFoundException e
        58: .line 426
            aload 3 /* cert */
            getstatic org.bouncycastle.asn1.x509.Extension.cRLDistributionPoints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            invokevirtual java.security.cert.X509Certificate.getExtensionValue:(Ljava/lang/String;)[B
            ifnull 87
        59: .line 428
            aconst_null
            astore 9 /* crl */
        start local 9 // java.security.cert.CRL crl
        60: .line 431
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            aload 5 /* baseParams */
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            aload 3 /* cert */
            getstatic org.bouncycastle.asn1.x509.Extension.cRLDistributionPoints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;)Lorg/bouncycastle/asn1/ASN1Primitive;
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
            invokevirtual org.bouncycastle.pkix.jcajce.X509RevocationChecker.downloadCRLs:(Ljavax/security/auth/x500/X500Principal;Ljava/util/Date;Lorg/bouncycastle/asn1/ASN1Primitive;Lorg/bouncycastle/jcajce/util/JcaJceHelper;)Ljava/security/cert/CRL;
            astore 9 /* crl */
        61: .line 432
            goto 64
        62: .line 433
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker java.security.cert.Certificate java.util.Collection java.security.cert.X509Certificate java.security.cert.TrustAnchor java.security.cert.PKIXParameters java.util.List org.bouncycastle.jcajce.PKIXExtendedParameters$Builder org.bouncycastle.pkix.jcajce.CRLNotFoundException java.security.cert.CRL
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            pop
        63: .line 435
            new java.security.cert.CertPathValidatorException
            dup
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.CRLNotFoundException.getMessage:()Ljava/lang/String;
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.CRLNotFoundException.getCause:()Ljava/lang/Throwable;
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        64: .line 438
      StackMap locals:
      StackMap stack:
            aload 9 /* crl */
            ifnull 72
        65: .line 442
            aload 7 /* pkixParamsBldr */
            new org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore
            dup
            aload 0 /* this */
        66: .line 443
            new org.bouncycastle.util.CollectionStore
            dup
            aload 9 /* crl */
            invokestatic java.util.Collections.singleton:(Ljava/lang/Object;)Ljava/util/Set;
            invokespecial org.bouncycastle.util.CollectionStore.<init>:(Ljava/util/Collection;)V
            invokespecial org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore.<init>:(Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;Lorg/bouncycastle/util/Store;)V
        67: .line 442
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.addCRLStore:(Lorg/bouncycastle/jcajce/PKIXCRLStore;)Lorg/bouncycastle/jcajce/PKIXExtendedParameters$Builder;
            pop
        68: .line 444
            aload 0 /* this */
            aload 7 /* pkixParamsBldr */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.build:()Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            aload 3 /* cert */
            new java.util.Date
            dup
            invokespecial java.util.Date.<init>:()V
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingPublicKey:Ljava/security/PublicKey;
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.helper:Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
            invokevirtual org.bouncycastle.pkix.jcajce.X509RevocationChecker.checkCRLs:(Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/List;Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;)V
        69: .line 445
            goto 88
        70: .line 446
      StackMap locals:
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            pop
        71: .line 448
            new java.security.cert.CertPathValidatorException
            dup
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.CRLNotFoundException.getMessage:()Ljava/lang/String;
            aload 8 /* e */
            invokevirtual org.bouncycastle.pkix.jcajce.CRLNotFoundException.getCause:()Ljava/lang/Throwable;
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        72: .line 453
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.canSoftFail:Z
            ifeq 86
        73: .line 455
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 10 /* issuer */
        start local 10 // javax.security.auth.x500.X500Principal issuer
        74: .line 457
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failures:Ljava/util/Map;
            aload 10 /* issuer */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.lang.Long
            astore 11 /* initial */
        start local 11 // java.lang.Long initial
        75: .line 458
            aload 11 /* initial */
            ifnull 84
        76: .line 460
            invokestatic java.lang.System.currentTimeMillis:()J
            aload 11 /* initial */
            invokevirtual java.lang.Long.longValue:()J
            lsub
            lstore 12 /* period */
        start local 12 // long period
        77: .line 461
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failHardMaxTime:J
            ldc -1
            lcmp
            ifeq 79
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failHardMaxTime:J
            lload 12 /* period */
            lcmp
            ifge 79
        78: .line 463
            aload 8 /* e */
            athrow
        79: .line 465
      StackMap locals: javax.security.auth.x500.X500Principal java.lang.Long long
      StackMap stack:
            lload 12 /* period */
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failLogMaxTime:J
            lcmp
            ifge 82
        80: .line 467
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.WARNING:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "soft failing for issuer: \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 10 /* issuer */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        81: .line 468
            goto 88
        82: .line 471
      StackMap locals:
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.SEVERE:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "soft failing for issuer: \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 10 /* issuer */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        end local 12 // long period
        83: .line 473
            goto 88
        84: .line 476
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            getfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.failures:Ljava/util/Map;
            aload 10 /* issuer */
            invokestatic java.lang.System.currentTimeMillis:()J
            invokestatic java.lang.Long.valueOf:(J)Ljava/lang/Long;
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        end local 11 // java.lang.Long initial
        end local 10 // javax.security.auth.x500.X500Principal issuer
        85: .line 478
            goto 88
        86: .line 481
      StackMap locals:
      StackMap stack:
            aload 8 /* e */
            athrow
        end local 9 // java.security.cert.CRL crl
        87: .line 487
      StackMap locals:
      StackMap stack:
            aload 8 /* e */
            athrow
        end local 8 // org.bouncycastle.pkix.jcajce.CRLNotFoundException e
        88: .line 491
      StackMap locals:
      StackMap stack:
            aload 0 /* this */
            aload 3 /* cert */
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.signingCert:Ljava/security/cert/X509Certificate;
        89: .line 492
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingPublicKey:Ljava/security/PublicKey;
        90: .line 493
            aload 0 /* this */
            aload 3 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            putfield org.bouncycastle.pkix.jcajce.X509RevocationChecker.workingIssuerName:Ljavax/security/auth/x500/X500Principal;
        91: .line 494
            return
        end local 7 // org.bouncycastle.jcajce.PKIXExtendedParameters$Builder pkixParamsBldr
        end local 6 // java.util.List issuerList
        end local 5 // java.security.cert.PKIXParameters baseParams
        end local 4 // java.security.cert.TrustAnchor trustAnchor
        end local 3 // java.security.cert.X509Certificate cert
        end local 2 // java.util.Collection collection
        end local 1 // java.security.cert.Certificate certificate
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   92     0            this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0   92     1     certificate  Ljava/security/cert/Certificate;
            0   92     2      collection  Ljava/util/Collection<Ljava/lang/String;>;
            1   92     3            cert  Ljava/security/cert/X509Certificate;
            7   92     4     trustAnchor  Ljava/security/cert/TrustAnchor;
           10   16     5              it  Ljava/util/Iterator;
           12   15     6          anchor  Ljava/security/cert/TrustAnchor;
           22   32     5      baseParams  Ljava/security/cert/PKIXParameters;
           34   92     5      baseParams  Ljava/security/cert/PKIXParameters;
           21   92     6      issuerList  Ljava/util/List<Ljavax/security/auth/x500/X500Principal;>;
           25   31     7               i  I
           33   34     7               e  Ljava/security/GeneralSecurityException;
           35   92     7  pkixParamsBldr  Lorg/bouncycastle/jcajce/PKIXExtendedParameters$Builder;
           36   42     8               i  I
           47   51     8               i  I
           56   57     8               e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           58   88     8               e  Lorg/bouncycastle/pkix/jcajce/CRLNotFoundException;
           60   87     9             crl  Ljava/security/cert/CRL;
           74   85    10          issuer  Ljavax/security/auth/x500/X500Principal;
           75   85    11         initial  Ljava/lang/Long;
           77   83    12          period  J
      Exception table:
        from    to  target  type
          21    31      32  Class java.security.GeneralSecurityException
          53    54      55  Class org.bouncycastle.pkix.jcajce.AnnotatedException
          53    54      57  Class org.bouncycastle.pkix.jcajce.CRLNotFoundException
          60    61      62  Class org.bouncycastle.pkix.jcajce.AnnotatedException
          65    69      70  Class org.bouncycastle.pkix.jcajce.AnnotatedException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    Signature: (Ljava/security/cert/Certificate;Ljava/util/Collection<Ljava/lang/String;>;)V
    MethodParameters:
             Name  Flags
      certificate  
      collection   

  private void addIssuers(java.util.List<javax.security.auth.x500.X500Principal>, java.security.cert.CertStore);
    descriptor: (Ljava/util/List;Ljava/security/cert/CertStore;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=3, args_size=3
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // java.util.List issuerList
        start local 2 // java.security.cert.CertStore certStore
         0: .line 499
            aload 2 /* certStore */
            new org.bouncycastle.pkix.jcajce.X509RevocationChecker$1
            dup
            aload 0 /* this */
            aload 1 /* issuerList */
            invokespecial org.bouncycastle.pkix.jcajce.X509RevocationChecker$1.<init>:(Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;Ljava/util/List;)V
            invokevirtual java.security.cert.CertStore.getCRLs:(Ljava/security/cert/CRLSelector;)Ljava/util/Collection;
            pop
         1: .line 513
            return
        end local 2 // java.security.cert.CertStore certStore
        end local 1 // java.util.List issuerList
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0    2     0        this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0    2     1  issuerList  Ljava/util/List<Ljavax/security/auth/x500/X500Principal;>;
            0    2     2   certStore  Ljava/security/cert/CertStore;
    Exceptions:
      throws java.security.cert.CertStoreException
    Signature: (Ljava/util/List<Ljavax/security/auth/x500/X500Principal;>;Ljava/security/cert/CertStore;)V
    MethodParameters:
            Name  Flags
      issuerList  final
      certStore   

  private void addIssuers(java.util.List<javax.security.auth.x500.X500Principal>, org.bouncycastle.util.Store<java.security.cert.CRL>);
    descriptor: (Ljava/util/List;Lorg/bouncycastle/util/Store;)V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=3, args_size=3
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // java.util.List issuerList
        start local 2 // org.bouncycastle.util.Store certStore
         0: .line 517
            aload 2 /* certStore */
            new org.bouncycastle.pkix.jcajce.X509RevocationChecker$2
            dup
            aload 0 /* this */
            aload 1 /* issuerList */
            invokespecial org.bouncycastle.pkix.jcajce.X509RevocationChecker$2.<init>:(Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;Ljava/util/List;)V
            invokeinterface org.bouncycastle.util.Store.getMatches:(Lorg/bouncycastle/util/Selector;)Ljava/util/Collection;
            pop
         1: .line 536
            return
        end local 2 // org.bouncycastle.util.Store certStore
        end local 1 // java.util.List issuerList
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0    2     0        this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0    2     1  issuerList  Ljava/util/List<Ljavax/security/auth/x500/X500Principal;>;
            0    2     2   certStore  Lorg/bouncycastle/util/Store<Ljava/security/cert/CRL;>;
    Signature: (Ljava/util/List<Ljavax/security/auth/x500/X500Principal;>;Lorg/bouncycastle/util/Store<Ljava/security/cert/CRL;>;)V
    MethodParameters:
            Name  Flags
      issuerList  final
      certStore   

  private java.security.cert.CRL downloadCRLs(javax.security.auth.x500.X500Principal, java.util.Date, org.bouncycastle.asn1.ASN1Primitive, org.bouncycastle.jcajce.util.JcaJceHelper);
    descriptor: (Ljavax/security/auth/x500/X500Principal;Ljava/util/Date;Lorg/bouncycastle/asn1/ASN1Primitive;Lorg/bouncycastle/jcajce/util/JcaJceHelper;)Ljava/security/cert/CRL;
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=5, locals=18, args_size=5
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // javax.security.auth.x500.X500Principal issuer
        start local 2 // java.util.Date currentDate
        start local 3 // org.bouncycastle.asn1.ASN1Primitive crlDpPrimitive
        start local 4 // org.bouncycastle.jcajce.util.JcaJceHelper helper
         0: .line 540
            aload 3 /* crlDpPrimitive */
            invokestatic org.bouncycastle.asn1.x509.CRLDistPoint.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            astore 5 /* crlDp */
        start local 5 // org.bouncycastle.asn1.x509.CRLDistPoint crlDp
         1: .line 541
            aload 5 /* crlDp */
            invokevirtual org.bouncycastle.asn1.x509.CRLDistPoint.getDistributionPoints:()[Lorg/bouncycastle/asn1/x509/DistributionPoint;
            astore 6 /* points */
        start local 6 // org.bouncycastle.asn1.x509.DistributionPoint[] points
         2: .line 543
            iconst_0
            istore 7 /* i */
        start local 7 // int i
         3: goto 38
         4: .line 545
      StackMap locals: org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int
      StackMap stack:
            aload 6 /* points */
            iload 7 /* i */
            aaload
            astore 8 /* dp */
        start local 8 // org.bouncycastle.asn1.x509.DistributionPoint dp
         5: .line 547
            aload 8 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            astore 9 /* dpn */
        start local 9 // org.bouncycastle.asn1.x509.DistributionPointName dpn
         6: .line 548
            aload 9 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getType:()I
            ifne 37
         7: .line 550
            aload 9 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
            invokestatic org.bouncycastle.asn1.x509.GeneralNames.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/GeneralNames;
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
            astore 10 /* names */
        start local 10 // org.bouncycastle.asn1.x509.GeneralName[] names
         8: .line 552
            iconst_0
            istore 11 /* n */
        start local 11 // int n
         9: goto 36
        10: .line 554
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker javax.security.auth.x500.X500Principal java.util.Date org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.jcajce.util.JcaJceHelper org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int org.bouncycastle.asn1.x509.DistributionPoint org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 10 /* names */
            iload 11 /* n */
            aaload
            astore 12 /* name */
        start local 12 // org.bouncycastle.asn1.x509.GeneralName name
        11: .line 555
            aload 12 /* name */
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getTagNo:()I
            bipush 6
            if_icmpne 35
        12: .line 559
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCache:Ljava/util/Map;
            aload 12 /* name */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.lang.ref.WeakReference
            astore 14 /* crlRef */
        start local 14 // java.lang.ref.WeakReference crlRef
        13: .line 560
            aload 14 /* crlRef */
            ifnull 20
        14: .line 562
            aload 14 /* crlRef */
            invokevirtual java.lang.ref.WeakReference.get:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 13 /* crl */
        start local 13 // java.security.cert.X509CRL crl
        15: .line 563
            aload 13 /* crl */
            ifnull 19
        16: .line 564
            aload 2 /* currentDate */
            aload 13 /* crl */
            invokevirtual java.security.cert.X509CRL.getThisUpdate:()Ljava/util/Date;
            invokevirtual java.util.Date.before:(Ljava/util/Date;)Z
            ifne 19
        17: .line 565
            aload 2 /* currentDate */
            aload 13 /* crl */
            invokevirtual java.security.cert.X509CRL.getNextUpdate:()Ljava/util/Date;
            invokevirtual java.util.Date.after:(Ljava/util/Date;)Z
            ifne 19
        18: .line 567
            aload 13 /* crl */
            areturn
        19: .line 569
      StackMap locals: org.bouncycastle.asn1.x509.GeneralName java.security.cert.X509CRL java.lang.ref.WeakReference
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCache:Ljava/util/Map;
            aload 12 /* name */
            invokeinterface java.util.Map.remove:(Ljava/lang/Object;)Ljava/lang/Object;
            pop
        end local 13 // java.security.cert.X509CRL crl
        20: .line 572
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker javax.security.auth.x500.X500Principal java.util.Date org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.jcajce.util.JcaJceHelper org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int org.bouncycastle.asn1.x509.DistributionPoint org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int org.bouncycastle.asn1.x509.GeneralName top java.lang.ref.WeakReference
      StackMap stack:
            aconst_null
            astore 15 /* url */
        start local 15 // java.net.URL url
        21: .line 575
            new java.net.URL
            dup
            aload 12 /* name */
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
            invokevirtual java.lang.Object.toString:()Ljava/lang/String;
            invokespecial java.net.URL.<init>:(Ljava/lang/String;)V
            astore 15 /* url */
        22: .line 577
            aload 4 /* helper */
            ldc "X.509"
            invokeinterface org.bouncycastle.jcajce.util.JcaJceHelper.createCertificateFactory:(Ljava/lang/String;)Ljava/security/cert/CertificateFactory;
            astore 16 /* certFact */
        start local 16 // java.security.cert.CertificateFactory certFact
        23: .line 579
            aload 15 /* url */
            invokevirtual java.net.URL.openStream:()Ljava/io/InputStream;
            astore 17 /* urlStream */
        start local 17 // java.io.InputStream urlStream
        24: .line 581
            aload 16 /* certFact */
            new java.io.BufferedInputStream
            dup
            aload 17 /* urlStream */
            invokespecial java.io.BufferedInputStream.<init>:(Ljava/io/InputStream;)V
            invokevirtual java.security.cert.CertificateFactory.generateCRL:(Ljava/io/InputStream;)Ljava/security/cert/CRL;
            checkcast java.security.cert.X509CRL
            astore 13 /* crl */
        start local 13 // java.security.cert.X509CRL crl
        25: .line 583
            aload 17 /* urlStream */
            invokevirtual java.io.InputStream.close:()V
        26: .line 585
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "downloaded CRL from CrlDP "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 15 /* url */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc " for issuer \""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 1 /* issuer */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        27: .line 587
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlCache:Ljava/util/Map;
            aload 12 /* name */
            new java.lang.ref.WeakReference
            dup
            aload 13 /* crl */
            invokespecial java.lang.ref.WeakReference.<init>:(Ljava/lang/Object;)V
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        28: .line 589
            aload 13 /* crl */
        29: areturn
        end local 17 // java.io.InputStream urlStream
        end local 16 // java.security.cert.CertificateFactory certFact
        end local 13 // java.security.cert.X509CRL crl
        30: .line 591
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker javax.security.auth.x500.X500Principal java.util.Date org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.jcajce.util.JcaJceHelper org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int org.bouncycastle.asn1.x509.DistributionPoint org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int org.bouncycastle.asn1.x509.GeneralName top java.lang.ref.WeakReference java.net.URL
      StackMap stack: java.lang.Exception
            astore 16 /* e */
        start local 16 // java.lang.Exception e
        31: .line 593
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.FINE:Ljava/util/logging/Level;
            invokevirtual java.util.logging.Logger.isLoggable:(Ljava/util/logging/Level;)Z
            ifeq 34
        32: .line 595
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.FINE:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "CrlDP "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 15 /* url */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc " ignored: "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 16 /* e */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 16 /* e */
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;Ljava/lang/Throwable;)V
        33: .line 596
            goto 35
        34: .line 599
      StackMap locals: java.lang.Exception
      StackMap stack:
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.LOG:Ljava/util/logging/Logger;
            getstatic java.util.logging.Level.INFO:Ljava/util/logging/Level;
            new java.lang.StringBuilder
            dup
            ldc "CrlDP "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 15 /* url */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc " ignored: "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 16 /* e */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokevirtual java.util.logging.Logger.log:(Ljava/util/logging/Level;Ljava/lang/String;)V
        end local 16 // java.lang.Exception e
        end local 15 // java.net.URL url
        end local 14 // java.lang.ref.WeakReference crlRef
        end local 12 // org.bouncycastle.asn1.x509.GeneralName name
        35: .line 552
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker javax.security.auth.x500.X500Principal java.util.Date org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.jcajce.util.JcaJceHelper org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int org.bouncycastle.asn1.x509.DistributionPoint org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            iinc 11 /* n */ 1
      StackMap locals:
      StackMap stack:
        36: iload 11 /* n */
            aload 10 /* names */
            arraylength
            if_icmpne 10
        end local 11 // int n
        end local 10 // org.bouncycastle.asn1.x509.GeneralName[] names
        end local 9 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        end local 8 // org.bouncycastle.asn1.x509.DistributionPoint dp
        37: .line 543
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker javax.security.auth.x500.X500Principal java.util.Date org.bouncycastle.asn1.ASN1Primitive org.bouncycastle.jcajce.util.JcaJceHelper org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.asn1.x509.DistributionPoint[] int
      StackMap stack:
            iinc 7 /* i */ 1
      StackMap locals:
      StackMap stack:
        38: iload 7 /* i */
            aload 6 /* points */
            arraylength
            if_icmpne 4
        end local 7 // int i
        39: .line 607
            aconst_null
            areturn
        end local 6 // org.bouncycastle.asn1.x509.DistributionPoint[] points
        end local 5 // org.bouncycastle.asn1.x509.CRLDistPoint crlDp
        end local 4 // org.bouncycastle.jcajce.util.JcaJceHelper helper
        end local 3 // org.bouncycastle.asn1.ASN1Primitive crlDpPrimitive
        end local 2 // java.util.Date currentDate
        end local 1 // javax.security.auth.x500.X500Principal issuer
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   40     0            this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0   40     1          issuer  Ljavax/security/auth/x500/X500Principal;
            0   40     2     currentDate  Ljava/util/Date;
            0   40     3  crlDpPrimitive  Lorg/bouncycastle/asn1/ASN1Primitive;
            0   40     4          helper  Lorg/bouncycastle/jcajce/util/JcaJceHelper;
            1   40     5           crlDp  Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            2   40     6          points  [Lorg/bouncycastle/asn1/x509/DistributionPoint;
            3   39     7               i  I
            5   37     8              dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
            6   37     9             dpn  Lorg/bouncycastle/asn1/x509/DistributionPointName;
            8   37    10           names  [Lorg/bouncycastle/asn1/x509/GeneralName;
            9   37    11               n  I
           11   35    12            name  Lorg/bouncycastle/asn1/x509/GeneralName;
           15   20    13             crl  Ljava/security/cert/X509CRL;
           25   30    13             crl  Ljava/security/cert/X509CRL;
           13   35    14          crlRef  Ljava/lang/ref/WeakReference<Ljava/security/cert/X509CRL;>;
           21   35    15             url  Ljava/net/URL;
           23   30    16        certFact  Ljava/security/cert/CertificateFactory;
           24   30    17       urlStream  Ljava/io/InputStream;
           31   35    16               e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
          21    29      30  Class java.lang.Exception
    MethodParameters:
                Name  Flags
      issuer          
      currentDate     
      crlDpPrimitive  
      helper          

  static java.util.List<org.bouncycastle.jcajce.PKIXCRLStore> getAdditionalStoresFromCRLDistributionPoint(org.bouncycastle.asn1.x509.CRLDistPoint, java.util.Map<org.bouncycastle.asn1.x509.GeneralName, org.bouncycastle.jcajce.PKIXCRLStore>);
    descriptor: (Lorg/bouncycastle/asn1/x509/CRLDistPoint;Ljava/util/Map;)Ljava/util/List;
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=9, args_size=2
        start local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
        start local 1 // java.util.Map namedCRLStoreMap
         0: .line 626
            aload 0 /* crldp */
            ifnull 28
         1: .line 628
            aconst_null
            astore 2 /* dps */
        start local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
         2: .line 631
            aload 0 /* crldp */
            invokevirtual org.bouncycastle.asn1.x509.CRLDistPoint.getDistributionPoints:()[Lorg/bouncycastle/asn1/x509/DistributionPoint;
            astore 2 /* dps */
         3: .line 632
            goto 8
         4: .line 633
      StackMap locals: org.bouncycastle.asn1.x509.CRLDistPoint java.util.Map org.bouncycastle.asn1.x509.DistributionPoint[]
      StackMap stack: java.lang.Exception
            astore 3 /* e */
        start local 3 // java.lang.Exception e
         5: .line 635
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
         6: .line 636
            ldc "could not read distribution points could not be read"
            aload 3 /* e */
         7: .line 635
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.lang.Exception e
         8: .line 638
      StackMap locals:
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 3 /* stores */
        start local 3 // java.util.List stores
         9: .line 640
            iconst_0
            istore 4 /* i */
        start local 4 // int i
        10: goto 26
        11: .line 642
      StackMap locals: java.util.List int
      StackMap stack:
            aload 2 /* dps */
            iload 4 /* i */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            astore 5 /* dpn */
        start local 5 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        12: .line 644
            aload 5 /* dpn */
            ifnull 25
        13: .line 646
            aload 5 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getType:()I
            ifne 25
        14: .line 649
            aload 5 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
        15: .line 648
            invokestatic org.bouncycastle.asn1.x509.GeneralNames.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/GeneralNames;
        16: .line 649
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
        17: .line 648
            astore 6 /* genNames */
        start local 6 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        18: .line 651
            iconst_0
            istore 7 /* j */
        start local 7 // int j
        19: goto 24
        20: .line 653
      StackMap locals: org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 1 /* namedCRLStoreMap */
            aload 6 /* genNames */
            iload 7 /* j */
            aaload
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast org.bouncycastle.jcajce.PKIXCRLStore
            astore 8 /* store */
        start local 8 // org.bouncycastle.jcajce.PKIXCRLStore store
        21: .line 654
            aload 8 /* store */
            ifnull 23
        22: .line 656
            aload 3 /* stores */
            aload 8 /* store */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 8 // org.bouncycastle.jcajce.PKIXCRLStore store
        23: .line 651
      StackMap locals:
      StackMap stack:
            iinc 7 /* j */ 1
      StackMap locals:
      StackMap stack:
        24: iload 7 /* j */
            aload 6 /* genNames */
            arraylength
            if_icmplt 20
        end local 7 // int j
        end local 6 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        end local 5 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        25: .line 640
      StackMap locals:
      StackMap stack:
            iinc 4 /* i */ 1
      StackMap locals:
      StackMap stack:
        26: iload 4 /* i */
            aload 2 /* dps */
            arraylength
            if_icmplt 11
        end local 4 // int i
        27: .line 663
            aload 3 /* stores */
            areturn
        end local 3 // java.util.List stores
        end local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
        28: .line 667
      StackMap locals:
      StackMap stack:
            getstatic java.util.Collections.EMPTY_LIST:Ljava/util/List;
            areturn
        end local 1 // java.util.Map namedCRLStoreMap
        end local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   29     0             crldp  Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            0   29     1  namedCRLStoreMap  Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
            2   28     2               dps  [Lorg/bouncycastle/asn1/x509/DistributionPoint;
            5    8     3                 e  Ljava/lang/Exception;
            9   28     3            stores  Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
           10   27     4                 i  I
           12   25     5               dpn  Lorg/bouncycastle/asn1/x509/DistributionPointName;
           18   25     6          genNames  [Lorg/bouncycastle/asn1/x509/GeneralName;
           19   25     7                 j  I
           21   23     8             store  Lorg/bouncycastle/jcajce/PKIXCRLStore;
      Exception table:
        from    to  target  type
           2     3       4  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException
    Signature: (Lorg/bouncycastle/asn1/x509/CRLDistPoint;Ljava/util/Map<Lorg/bouncycastle/asn1/x509/GeneralName;Lorg/bouncycastle/jcajce/PKIXCRLStore;>;)Ljava/util/List<Lorg/bouncycastle/jcajce/PKIXCRLStore;>;
    MethodParameters:
                  Name  Flags
      crldp             
      namedCRLStoreMap  

  protected void checkCRLs(org.bouncycastle.jcajce.PKIXExtendedParameters, java.security.cert.X509Certificate, java.util.Date, java.security.cert.X509Certificate, java.security.PublicKey, java.util.List, org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper);
    descriptor: (Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/List;Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;)V
    flags: (0x0004) ACC_PROTECTED
    Code:
      stack=11, locals=18, args_size=8
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
        start local 1 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
        start local 2 // java.security.cert.X509Certificate cert
        start local 3 // java.util.Date validDate
        start local 4 // java.security.cert.X509Certificate sign
        start local 5 // java.security.PublicKey workingPublicKey
        start local 6 // java.util.List certPathCerts
        start local 7 // org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper helper
         0: .line 695
            aconst_null
            astore 8 /* lastException */
        start local 8 // org.bouncycastle.pkix.jcajce.AnnotatedException lastException
         1: .line 696
            aconst_null
            astore 9 /* crldp */
        start local 9 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
         2: .line 699
            aload 2 /* cert */
            getstatic org.bouncycastle.asn1.x509.Extension.cRLDistributionPoints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokestatic org.bouncycastle.pkix.jcajce.RevocationUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;)Lorg/bouncycastle/asn1/ASN1Primitive;
            invokestatic org.bouncycastle.asn1.x509.CRLDistPoint.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            astore 9 /* crldp */
         3: .line 700
            goto 6
         4: .line 701
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker org.bouncycastle.jcajce.PKIXExtendedParameters java.security.cert.X509Certificate java.util.Date java.security.cert.X509Certificate java.security.PublicKey java.util.List org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper org.bouncycastle.pkix.jcajce.AnnotatedException org.bouncycastle.asn1.x509.CRLDistPoint
      StackMap stack: java.lang.Exception
            astore 10 /* e */
        start local 10 // java.lang.Exception e
         5: .line 703
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "cannot read CRL distribution point extension"
            aload 10 /* e */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 10 // java.lang.Exception e
         6: .line 706
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.jcajce.PKIXExtendedParameters$Builder
            dup
            aload 1 /* paramsPKIX */
            invokespecial org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.<init>:(Lorg/bouncycastle/jcajce/PKIXExtendedParameters;)V
            astore 10 /* paramsBldr */
        start local 10 // org.bouncycastle.jcajce.PKIXExtendedParameters$Builder paramsBldr
         7: .line 709
            aload 9 /* crldp */
            aload 1 /* paramsPKIX */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters.getNamedCRLStoreMap:()Ljava/util/Map;
            invokestatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.getAdditionalStoresFromCRLDistributionPoint:(Lorg/bouncycastle/asn1/x509/CRLDistPoint;Ljava/util/Map;)Ljava/util/List;
            astore 11 /* extras */
        start local 11 // java.util.List extras
         8: .line 710
            aload 11 /* extras */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 12 /* it */
        start local 12 // java.util.Iterator it
         9: goto 11
        10: .line 712
      StackMap locals: org.bouncycastle.jcajce.PKIXExtendedParameters$Builder java.util.List java.util.Iterator
      StackMap stack:
            aload 10 /* paramsBldr */
            aload 12 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.jcajce.PKIXCRLStore
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.addCRLStore:(Lorg/bouncycastle/jcajce/PKIXCRLStore;)Lorg/bouncycastle/jcajce/PKIXExtendedParameters$Builder;
            pop
        11: .line 710
      StackMap locals:
      StackMap stack:
            aload 12 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 10
        end local 12 // java.util.Iterator it
        end local 11 // java.util.List extras
        12: .line 714
            goto 17
        13: .line 715
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker org.bouncycastle.jcajce.PKIXExtendedParameters java.security.cert.X509Certificate java.util.Date java.security.cert.X509Certificate java.security.PublicKey java.util.List org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper org.bouncycastle.pkix.jcajce.AnnotatedException org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.jcajce.PKIXExtendedParameters$Builder
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 11 /* e */
        start local 11 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        14: .line 717
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
        15: .line 718
            ldc "no additional CRL locations could be decoded from CRL distribution point extension"
            aload 11 /* e */
        16: .line 717
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 11 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        17: .line 720
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.pkix.jcajce.CertStatus
            dup
            invokespecial org.bouncycastle.pkix.jcajce.CertStatus.<init>:()V
            astore 11 /* certStatus */
        start local 11 // org.bouncycastle.pkix.jcajce.CertStatus certStatus
        18: .line 721
            new org.bouncycastle.pkix.jcajce.ReasonsMask
            dup
            invokespecial org.bouncycastle.pkix.jcajce.ReasonsMask.<init>:()V
            astore 12 /* reasonsMask */
        start local 12 // org.bouncycastle.pkix.jcajce.ReasonsMask reasonsMask
        19: .line 722
            aload 10 /* paramsBldr */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters$Builder.build:()Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            astore 13 /* finalParams */
        start local 13 // org.bouncycastle.jcajce.PKIXExtendedParameters finalParams
        20: .line 724
            iconst_0
            istore 14 /* validCrlFound */
        start local 14 // boolean validCrlFound
        21: .line 726
            aload 9 /* crldp */
            ifnull 37
        22: .line 728
            aconst_null
            astore 15 /* dps */
        start local 15 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
        23: .line 731
            aload 9 /* crldp */
            invokevirtual org.bouncycastle.asn1.x509.CRLDistPoint.getDistributionPoints:()[Lorg/bouncycastle/asn1/x509/DistributionPoint;
            astore 15 /* dps */
        24: .line 732
            goto 27
        25: .line 733
      StackMap locals: org.bouncycastle.pkix.jcajce.X509RevocationChecker org.bouncycastle.jcajce.PKIXExtendedParameters java.security.cert.X509Certificate java.util.Date java.security.cert.X509Certificate java.security.PublicKey java.util.List org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper org.bouncycastle.pkix.jcajce.AnnotatedException org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.jcajce.PKIXExtendedParameters$Builder org.bouncycastle.pkix.jcajce.CertStatus org.bouncycastle.pkix.jcajce.ReasonsMask org.bouncycastle.jcajce.PKIXExtendedParameters int org.bouncycastle.asn1.x509.DistributionPoint[]
      StackMap stack: java.lang.Exception
            astore 16 /* e */
        start local 16 // java.lang.Exception e
        26: .line 735
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "cannot read distribution points"
            aload 16 /* e */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 16 // java.lang.Exception e
        27: .line 737
      StackMap locals:
      StackMap stack:
            aload 15 /* dps */
            ifnull 37
        28: .line 739
            iconst_0
            istore 16 /* i */
        start local 16 // int i
        29: goto 36
        30: .line 743
      StackMap locals: int
      StackMap stack:
            aload 15 /* dps */
            iload 16 /* i */
            aaload
            aload 13 /* finalParams */
            aload 2 /* cert */
            aload 3 /* validDate */
            aload 4 /* sign */
            aload 5 /* workingPublicKey */
            aload 11 /* certStatus */
            aload 12 /* reasonsMask */
            aload 6 /* certPathCerts */
            aload 7 /* helper */
            invokestatic org.bouncycastle.pkix.jcajce.RFC3280CertPathUtilities.checkCRL:(Lorg/bouncycastle/asn1/x509/DistributionPoint;Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Lorg/bouncycastle/pkix/jcajce/CertStatus;Lorg/bouncycastle/pkix/jcajce/ReasonsMask;Ljava/util/List;Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;)V
        31: .line 744
            iconst_1
            istore 14 /* validCrlFound */
        32: .line 745
            goto 35
        33: .line 746
      StackMap locals:
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 17 /* e */
        start local 17 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        34: .line 748
            aload 17 /* e */
            astore 8 /* lastException */
        end local 17 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        35: .line 739
      StackMap locals:
      StackMap stack:
            iinc 16 /* i */ 1
      StackMap locals:
      StackMap stack:
        36: iload 16 /* i */
            aload 15 /* dps */
            arraylength
            if_icmpge 37
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            bipush 11
            if_icmpne 37
            aload 12 /* reasonsMask */
            invokevirtual org.bouncycastle.pkix.jcajce.ReasonsMask.isAllReasons:()Z
            ifeq 30
        end local 16 // int i
        end local 15 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
        37: .line 760
      StackMap locals:
      StackMap stack:
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            bipush 11
            if_icmpne 50
            aload 12 /* reasonsMask */
            invokevirtual org.bouncycastle.pkix.jcajce.ReasonsMask.isAllReasons:()Z
            ifne 50
        38: .line 769
            aload 2 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            astore 15 /* issuer */
        start local 15 // javax.security.auth.x500.X500Principal issuer
        39: .line 771
            new org.bouncycastle.asn1.x509.DistributionPoint
            dup
            new org.bouncycastle.asn1.x509.DistributionPointName
            dup
            iconst_0
            new org.bouncycastle.asn1.x509.GeneralNames
            dup
        40: .line 772
            new org.bouncycastle.asn1.x509.GeneralName
            dup
            iconst_4
            aload 15 /* issuer */
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.x500.X500Name.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x500/X500Name;
            invokespecial org.bouncycastle.asn1.x509.GeneralName.<init>:(ILorg/bouncycastle/asn1/ASN1Encodable;)V
            invokespecial org.bouncycastle.asn1.x509.GeneralNames.<init>:(Lorg/bouncycastle/asn1/x509/GeneralName;)V
            invokespecial org.bouncycastle.asn1.x509.DistributionPointName.<init>:(ILorg/bouncycastle/asn1/ASN1Encodable;)V
            aconst_null
            aconst_null
        41: .line 771
            invokespecial org.bouncycastle.asn1.x509.DistributionPoint.<init>:(Lorg/bouncycastle/asn1/x509/DistributionPointName;Lorg/bouncycastle/asn1/x509/ReasonFlags;Lorg/bouncycastle/asn1/x509/GeneralNames;)V
            astore 16 /* dp */
        start local 16 // org.bouncycastle.asn1.x509.DistributionPoint dp
        42: .line 773
            aload 1 /* paramsPKIX */
            invokevirtual org.bouncycastle.jcajce.PKIXExtendedParameters.clone:()Ljava/lang/Object;
            checkcast org.bouncycastle.jcajce.PKIXExtendedParameters
            astore 17 /* paramsPKIXClone */
        start local 17 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIXClone
        43: .line 774
            aload 16 /* dp */
            aload 17 /* paramsPKIXClone */
            aload 2 /* cert */
            aload 3 /* validDate */
            aload 4 /* sign */
            aload 5 /* workingPublicKey */
            aload 11 /* certStatus */
            aload 12 /* reasonsMask */
        44: .line 775
            aload 6 /* certPathCerts */
            aload 7 /* helper */
        45: .line 774
            invokestatic org.bouncycastle.pkix.jcajce.RFC3280CertPathUtilities.checkCRL:(Lorg/bouncycastle/asn1/x509/DistributionPoint;Lorg/bouncycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Lorg/bouncycastle/pkix/jcajce/CertStatus;Lorg/bouncycastle/pkix/jcajce/ReasonsMask;Ljava/util/List;Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;)V
        46: .line 776
            iconst_1
            istore 14 /* validCrlFound */
        end local 17 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIXClone
        end local 16 // org.bouncycastle.asn1.x509.DistributionPoint dp
        end local 15 // javax.security.auth.x500.X500Principal issuer
        47: .line 777
            goto 50
        48: .line 778
      StackMap locals:
      StackMap stack: org.bouncycastle.pkix.jcajce.AnnotatedException
            astore 15 /* e */
        start local 15 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        49: .line 780
            aload 15 /* e */
            astore 8 /* lastException */
        end local 15 // org.bouncycastle.pkix.jcajce.AnnotatedException e
        50: .line 784
      StackMap locals:
      StackMap stack:
            iload 14 /* validCrlFound */
            ifne 54
        51: .line 786
            aload 8 /* lastException */
            instanceof org.bouncycastle.pkix.jcajce.AnnotatedException
            ifeq 53
        52: .line 788
            new org.bouncycastle.pkix.jcajce.CRLNotFoundException
            dup
            ldc "no valid CRL found"
            aload 8 /* lastException */
            invokespecial org.bouncycastle.pkix.jcajce.CRLNotFoundException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        53: .line 791
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.pkix.jcajce.CRLNotFoundException
            dup
            ldc "no valid CRL found"
            invokespecial org.bouncycastle.pkix.jcajce.CRLNotFoundException.<init>:(Ljava/lang/String;)V
            athrow
        54: .line 793
      StackMap locals:
      StackMap stack:
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            bipush 11
            if_icmpeq 62
        55: .line 795
            new java.text.SimpleDateFormat
            dup
            ldc "yyyy-MM-dd HH:mm:ss Z"
            invokespecial java.text.SimpleDateFormat.<init>:(Ljava/lang/String;)V
            astore 15 /* df */
        start local 15 // java.text.SimpleDateFormat df
        56: .line 796
            aload 15 /* df */
            ldc "UTC"
            invokestatic java.util.TimeZone.getTimeZone:(Ljava/lang/String;)Ljava/util/TimeZone;
            invokevirtual java.text.SimpleDateFormat.setTimeZone:(Ljava/util/TimeZone;)V
        57: .line 797
            new java.lang.StringBuilder
            dup
            ldc "certificate [issuer=\""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 2 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\",serialNumber="
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        58: .line 798
            aload 2 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSerialNumber:()Ljava/math/BigInteger;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc ",subject=\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 2 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\"] revoked after "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 15 /* df */
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getRevocationDate:()Ljava/util/Date;
            invokevirtual java.text.SimpleDateFormat.format:(Ljava/util/Date;)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
        59: .line 797
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            astore 16 /* message */
        start local 16 // java.lang.String message
        60: .line 799
            new java.lang.StringBuilder
            dup
            aload 16 /* message */
            invokestatic java.lang.String.valueOf:(Ljava/lang/Object;)Ljava/lang/String;
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            ldc ", reason: "
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            getstatic org.bouncycastle.pkix.jcajce.X509RevocationChecker.crlReasons:[Ljava/lang/String;
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            aaload
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            astore 16 /* message */
        61: .line 800
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            aload 16 /* message */
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        end local 16 // java.lang.String message
        end local 15 // java.text.SimpleDateFormat df
        62: .line 802
      StackMap locals:
      StackMap stack:
            aload 12 /* reasonsMask */
            invokevirtual org.bouncycastle.pkix.jcajce.ReasonsMask.isAllReasons:()Z
            ifne 64
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            bipush 11
            if_icmpne 64
        63: .line 804
            aload 11 /* certStatus */
            bipush 12
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.setCertStatus:(I)V
        64: .line 806
      StackMap locals:
      StackMap stack:
            aload 11 /* certStatus */
            invokevirtual org.bouncycastle.pkix.jcajce.CertStatus.getCertStatus:()I
            bipush 12
            if_icmpne 66
        65: .line 808
            new org.bouncycastle.pkix.jcajce.AnnotatedException
            dup
            ldc "certificate status could not be determined"
            invokespecial org.bouncycastle.pkix.jcajce.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        66: .line 810
      StackMap locals:
      StackMap stack:
            return
        end local 14 // boolean validCrlFound
        end local 13 // org.bouncycastle.jcajce.PKIXExtendedParameters finalParams
        end local 12 // org.bouncycastle.pkix.jcajce.ReasonsMask reasonsMask
        end local 11 // org.bouncycastle.pkix.jcajce.CertStatus certStatus
        end local 10 // org.bouncycastle.jcajce.PKIXExtendedParameters$Builder paramsBldr
        end local 9 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
        end local 8 // org.bouncycastle.pkix.jcajce.AnnotatedException lastException
        end local 7 // org.bouncycastle.pkix.jcajce.PKIXJcaJceHelper helper
        end local 6 // java.util.List certPathCerts
        end local 5 // java.security.PublicKey workingPublicKey
        end local 4 // java.security.cert.X509Certificate sign
        end local 3 // java.util.Date validDate
        end local 2 // java.security.cert.X509Certificate cert
        end local 1 // org.bouncycastle.jcajce.PKIXExtendedParameters paramsPKIX
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   67     0              this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
            0   67     1        paramsPKIX  Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
            0   67     2              cert  Ljava/security/cert/X509Certificate;
            0   67     3         validDate  Ljava/util/Date;
            0   67     4              sign  Ljava/security/cert/X509Certificate;
            0   67     5  workingPublicKey  Ljava/security/PublicKey;
            0   67     6     certPathCerts  Ljava/util/List;
            0   67     7            helper  Lorg/bouncycastle/pkix/jcajce/PKIXJcaJceHelper;
            1   67     8     lastException  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
            2   67     9             crldp  Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            5    6    10                 e  Ljava/lang/Exception;
            7   67    10        paramsBldr  Lorg/bouncycastle/jcajce/PKIXExtendedParameters$Builder;
            8   12    11            extras  Ljava/util/List;
            9   12    12                it  Ljava/util/Iterator;
           14   17    11                 e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           18   67    11        certStatus  Lorg/bouncycastle/pkix/jcajce/CertStatus;
           19   67    12       reasonsMask  Lorg/bouncycastle/pkix/jcajce/ReasonsMask;
           20   67    13       finalParams  Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
           21   67    14     validCrlFound  Z
           23   37    15               dps  [Lorg/bouncycastle/asn1/x509/DistributionPoint;
           26   27    16                 e  Ljava/lang/Exception;
           29   37    16                 i  I
           34   35    17                 e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           39   47    15            issuer  Ljavax/security/auth/x500/X500Principal;
           42   47    16                dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
           43   47    17   paramsPKIXClone  Lorg/bouncycastle/jcajce/PKIXExtendedParameters;
           49   50    15                 e  Lorg/bouncycastle/pkix/jcajce/AnnotatedException;
           56   62    15                df  Ljava/text/SimpleDateFormat;
           60   62    16           message  Ljava/lang/String;
      Exception table:
        from    to  target  type
           2     3       4  Class java.lang.Exception
           7    12      13  Class org.bouncycastle.pkix.jcajce.AnnotatedException
          23    24      25  Class java.lang.Exception
          30    32      33  Class org.bouncycastle.pkix.jcajce.AnnotatedException
          38    47      48  Class org.bouncycastle.pkix.jcajce.AnnotatedException
    Exceptions:
      throws org.bouncycastle.pkix.jcajce.AnnotatedException, java.security.cert.CertPathValidatorException
    MethodParameters:
                  Name  Flags
      paramsPKIX        
      cert              
      validDate         
      sign              
      workingPublicKey  
      certPathCerts     
      helper            

  public java.lang.Object clone();
    descriptor: ()Ljava/lang/Object;
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
         0: .line 814
            aload 0 /* this */
            areturn
        end local 0 // org.bouncycastle.pkix.jcajce.X509RevocationChecker this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/pkix/jcajce/X509RevocationChecker;
}
SourceFile: "X509RevocationChecker.java"
NestMembers:
  org.bouncycastle.pkix.jcajce.X509RevocationChecker$1  org.bouncycastle.pkix.jcajce.X509RevocationChecker$2  org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder  org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore
InnerClasses:
  public Builder = org.bouncycastle.jcajce.PKIXExtendedParameters$Builder of org.bouncycastle.jcajce.PKIXExtendedParameters
  org.bouncycastle.pkix.jcajce.X509RevocationChecker$1
  org.bouncycastle.pkix.jcajce.X509RevocationChecker$2
  public Builder = org.bouncycastle.pkix.jcajce.X509RevocationChecker$Builder of org.bouncycastle.pkix.jcajce.X509RevocationChecker
  private LocalCRLStore = org.bouncycastle.pkix.jcajce.X509RevocationChecker$LocalCRLStore of org.bouncycastle.pkix.jcajce.X509RevocationChecker