public class org.bouncycastle.jce.provider.CertPathValidatorUtilities
  minor version: 0
  major version: 59
  flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
  this_class: org.bouncycastle.jce.provider.CertPathValidatorUtilities
  super_class: java.lang.Object
{
  protected static final org.bouncycastle.jce.provider.PKIXCRLUtil CRL_UTIL;
    descriptor: Lorg/bouncycastle/jce/provider/PKIXCRLUtil;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String CERTIFICATE_POLICIES;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String BASIC_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String POLICY_MAPPINGS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String SUBJECT_ALTERNATIVE_NAME;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String NAME_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String KEY_USAGE;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String INHIBIT_ANY_POLICY;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String ISSUING_DISTRIBUTION_POINT;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String DELTA_CRL_INDICATOR;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String POLICY_CONSTRAINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String FRESHEST_CRL;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String CRL_DISTRIBUTION_POINTS;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String AUTHORITY_KEY_IDENTIFIER;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final java.lang.String ANY_POLICY;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: "2.5.29.32.0"

  protected static final java.lang.String CRL_NUMBER;
    descriptor: Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  protected static final int KEY_CERT_SIGN;
    descriptor: I
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: 5

  protected static final int CRL_SIGN;
    descriptor: I
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    ConstantValue: 6

  protected static final java.lang.String[] crlReasons;
    descriptor: [Ljava/lang/String;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=0, args_size=0
         0: .line 76
            new org.bouncycastle.jce.provider.PKIXCRLUtil
            dup
            invokespecial org.bouncycastle.jce.provider.PKIXCRLUtil.<init>:()V
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_UTIL:Lorg/bouncycastle/jce/provider/PKIXCRLUtil;
         1: .line 78
            getstatic org.bouncycastle.asn1.x509.X509Extensions.CertificatePolicies:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CERTIFICATE_POLICIES:Ljava/lang/String;
         2: .line 79
            getstatic org.bouncycastle.asn1.x509.X509Extensions.BasicConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.BASIC_CONSTRAINTS:Ljava/lang/String;
         3: .line 80
            getstatic org.bouncycastle.asn1.x509.X509Extensions.PolicyMappings:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.POLICY_MAPPINGS:Ljava/lang/String;
         4: .line 81
            getstatic org.bouncycastle.asn1.x509.X509Extensions.SubjectAlternativeName:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.SUBJECT_ALTERNATIVE_NAME:Ljava/lang/String;
         5: .line 82
            getstatic org.bouncycastle.asn1.x509.X509Extensions.NameConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.NAME_CONSTRAINTS:Ljava/lang/String;
         6: .line 83
            getstatic org.bouncycastle.asn1.x509.X509Extensions.KeyUsage:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.KEY_USAGE:Ljava/lang/String;
         7: .line 84
            getstatic org.bouncycastle.asn1.x509.X509Extensions.InhibitAnyPolicy:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.INHIBIT_ANY_POLICY:Ljava/lang/String;
         8: .line 85
            getstatic org.bouncycastle.asn1.x509.X509Extensions.IssuingDistributionPoint:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;
         9: .line 86
            getstatic org.bouncycastle.asn1.x509.X509Extensions.DeltaCRLIndicator:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.DELTA_CRL_INDICATOR:Ljava/lang/String;
        10: .line 87
            getstatic org.bouncycastle.asn1.x509.X509Extensions.PolicyConstraints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.POLICY_CONSTRAINTS:Ljava/lang/String;
        11: .line 88
            getstatic org.bouncycastle.asn1.x509.X509Extensions.FreshestCRL:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.FRESHEST_CRL:Ljava/lang/String;
        12: .line 89
            getstatic org.bouncycastle.asn1.x509.X509Extensions.CRLDistributionPoints:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_DISTRIBUTION_POINTS:Ljava/lang/String;
        13: .line 90
            getstatic org.bouncycastle.asn1.x509.X509Extensions.AuthorityKeyIdentifier:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.AUTHORITY_KEY_IDENTIFIER:Ljava/lang/String;
        14: .line 94
            getstatic org.bouncycastle.asn1.x509.X509Extensions.CRLNumber:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_NUMBER:Ljava/lang/String;
        15: .line 102
            bipush 11
            anewarray java.lang.String
            dup
            iconst_0
        16: .line 103
            ldc "unspecified"
            aastore
            dup
            iconst_1
        17: .line 104
            ldc "keyCompromise"
            aastore
            dup
            iconst_2
        18: .line 105
            ldc "cACompromise"
            aastore
            dup
            iconst_3
        19: .line 106
            ldc "affiliationChanged"
            aastore
            dup
            iconst_4
        20: .line 107
            ldc "superseded"
            aastore
            dup
            iconst_5
        21: .line 108
            ldc "cessationOfOperation"
            aastore
            dup
            bipush 6
        22: .line 109
            ldc "certificateHold"
            aastore
            dup
            bipush 7
        23: .line 110
            ldc "unknown"
            aastore
            dup
            bipush 8
        24: .line 111
            ldc "removeFromCRL"
            aastore
            dup
            bipush 9
        25: .line 112
            ldc "privilegeWithdrawn"
            aastore
            dup
            bipush 10
        26: .line 113
            ldc "aACompromise"
            aastore
        27: .line 102
            putstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.crlReasons:[Ljava/lang/String;
        28: .line 113
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.jce.provider.CertPathValidatorUtilities this
         0: .line 74
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // org.bouncycastle.jce.provider.CertPathValidatorUtilities this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/jce/provider/CertPathValidatorUtilities;

  protected static java.security.cert.TrustAnchor findTrustAnchor(java.security.cert.X509Certificate, java.util.Set);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;)Ljava/security/cert/TrustAnchor;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.Set trustAnchors
         0: .line 135
            aload 0 /* cert */
            aload 1 /* trustAnchors */
            aconst_null
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.findTrustAnchor:(Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Ljava/security/cert/TrustAnchor;
            areturn
        end local 1 // java.util.Set trustAnchors
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0    1     0          cert  Ljava/security/cert/X509Certificate;
            0    1     1  trustAnchors  Ljava/util/Set;
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
              Name  Flags
      cert          
      trustAnchors  

  protected static java.security.cert.TrustAnchor findTrustAnchor(java.security.cert.X509Certificate, java.util.Set, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/util/Set;Ljava/lang/String;)Ljava/security/cert/TrustAnchor;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=10, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.util.Set trustAnchors
        start local 2 // java.lang.String sigProvider
         0: .line 161
            aconst_null
            astore 3 /* trust */
        start local 3 // java.security.cert.TrustAnchor trust
         1: .line 162
            aconst_null
            astore 4 /* trustPublicKey */
        start local 4 // java.security.PublicKey trustPublicKey
         2: .line 163
            aconst_null
            astore 5 /* invalidKeyEx */
        start local 5 // java.lang.Exception invalidKeyEx
         3: .line 165
            new java.security.cert.X509CertSelector
            dup
            invokespecial java.security.cert.X509CertSelector.<init>:()V
            astore 6 /* certSelectX509 */
        start local 6 // java.security.cert.X509CertSelector certSelectX509
         4: .line 166
            aload 0 /* cert */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getEncodedIssuerPrincipal:(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;
            astore 7 /* certIssuer */
        start local 7 // javax.security.auth.x500.X500Principal certIssuer
         5: .line 170
            aload 6 /* certSelectX509 */
            aload 7 /* certIssuer */
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokevirtual java.security.cert.X509CertSelector.setSubject:([B)V
         6: .line 171
            goto 9
         7: .line 172
      StackMap locals: java.security.cert.X509Certificate java.util.Set java.lang.String java.security.cert.TrustAnchor java.security.PublicKey java.lang.Exception java.security.cert.X509CertSelector javax.security.auth.x500.X500Principal
      StackMap stack: java.io.IOException
            astore 8 /* ex */
        start local 8 // java.io.IOException ex
         8: .line 174
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "Cannot set subject search criteria for trust anchor."
            aload 8 /* ex */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 8 // java.io.IOException ex
         9: .line 177
      StackMap locals:
      StackMap stack:
            aload 1 /* trustAnchors */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 8 /* iter */
        start local 8 // java.util.Iterator iter
        10: .line 178
            goto 36
        11: .line 180
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 8 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.TrustAnchor
            astore 3 /* trust */
        12: .line 181
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            ifnull 18
        13: .line 183
            aload 6 /* certSelectX509 */
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509CertSelector.match:(Ljava/security/cert/Certificate;)Z
            ifeq 16
        14: .line 185
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getTrustedCert:()Ljava/security/cert/X509Certificate;
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 4 /* trustPublicKey */
        15: .line 186
            goto 30
        16: .line 189
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        17: .line 191
            goto 30
        18: .line 192
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAName:()Ljava/lang/String;
            ifnull 29
        19: .line 193
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            ifnull 29
        20: .line 197
            new javax.security.auth.x500.X500Principal
            dup
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAName:()Ljava/lang/String;
            invokespecial javax.security.auth.x500.X500Principal.<init>:(Ljava/lang/String;)V
            astore 9 /* caName */
        start local 9 // javax.security.auth.x500.X500Principal caName
        21: .line 198
            aload 7 /* certIssuer */
            aload 9 /* caName */
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifeq 24
        22: .line 200
            aload 3 /* trust */
            invokevirtual java.security.cert.TrustAnchor.getCAPublicKey:()Ljava/security/PublicKey;
            astore 4 /* trustPublicKey */
        23: .line 201
            goto 30
        24: .line 204
      StackMap locals: javax.security.auth.x500.X500Principal
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        end local 9 // javax.security.auth.x500.X500Principal caName
        25: .line 206
            goto 30
        26: .line 207
      StackMap locals: java.security.cert.X509Certificate java.util.Set java.lang.String java.security.cert.TrustAnchor java.security.PublicKey java.lang.Exception java.security.cert.X509CertSelector javax.security.auth.x500.X500Principal java.util.Iterator
      StackMap stack: java.lang.IllegalArgumentException
            pop
        27: .line 209
            aconst_null
            astore 3 /* trust */
        28: .line 211
            goto 30
        29: .line 214
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 3 /* trust */
        30: .line 217
      StackMap locals:
      StackMap stack:
            aload 4 /* trustPublicKey */
            ifnull 36
        31: .line 221
            aload 0 /* cert */
            aload 4 /* trustPublicKey */
            aload 2 /* sigProvider */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.verifyX509Certificate:(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
        32: .line 222
            goto 36
        33: .line 223
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 9 /* ex */
        start local 9 // java.lang.Exception ex
        34: .line 225
            aload 9 /* ex */
            astore 5 /* invalidKeyEx */
        35: .line 226
            aconst_null
            astore 3 /* trust */
        end local 9 // java.lang.Exception ex
        36: .line 178
      StackMap locals:
      StackMap stack:
            aload 8 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifeq 37
            aload 3 /* trust */
            ifnull 11
        37: .line 231
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            ifnonnull 39
            aload 5 /* invalidKeyEx */
            ifnull 39
        38: .line 233
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "TrustAnchor found but certificate validation failed."
            aload 5 /* invalidKeyEx */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        39: .line 236
      StackMap locals:
      StackMap stack:
            aload 3 /* trust */
            areturn
        end local 8 // java.util.Iterator iter
        end local 7 // javax.security.auth.x500.X500Principal certIssuer
        end local 6 // java.security.cert.X509CertSelector certSelectX509
        end local 5 // java.lang.Exception invalidKeyEx
        end local 4 // java.security.PublicKey trustPublicKey
        end local 3 // java.security.cert.TrustAnchor trust
        end local 2 // java.lang.String sigProvider
        end local 1 // java.util.Set trustAnchors
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot            Name  Signature
            0   40     0            cert  Ljava/security/cert/X509Certificate;
            0   40     1    trustAnchors  Ljava/util/Set;
            0   40     2     sigProvider  Ljava/lang/String;
            1   40     3           trust  Ljava/security/cert/TrustAnchor;
            2   40     4  trustPublicKey  Ljava/security/PublicKey;
            3   40     5    invalidKeyEx  Ljava/lang/Exception;
            4   40     6  certSelectX509  Ljava/security/cert/X509CertSelector;
            5   40     7      certIssuer  Ljavax/security/auth/x500/X500Principal;
            8    9     8              ex  Ljava/io/IOException;
           10   40     8            iter  Ljava/util/Iterator;
           21   25     9          caName  Ljavax/security/auth/x500/X500Principal;
           34   36     9              ex  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           5     6       7  Class java.io.IOException
          20    25      26  Class java.lang.IllegalArgumentException
          31    32      33  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
              Name  Flags
      cert          
      trustAnchors  
      sigProvider   

  protected static void addAdditionalStoresFromAltNames(java.security.cert.X509Certificate, org.bouncycastle.x509.ExtendedPKIXParameters);
    descriptor: (Ljava/security/cert/X509Certificate;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=5, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
         0: .line 246
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerAlternativeNames:()Ljava/util/Collection;
            ifnull 8
         1: .line 248
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerAlternativeNames:()Ljava/util/Collection;
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 2 /* it */
        start local 2 // java.util.Iterator it
         2: .line 249
            goto 7
         3: .line 252
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 2 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.util.List
            astore 3 /* list */
        start local 3 // java.util.List list
         4: .line 253
            aload 3 /* list */
            iconst_0
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            new java.lang.Integer
            dup
            bipush 6
            invokespecial java.lang.Integer.<init>:(I)V
            invokevirtual java.lang.Object.equals:(Ljava/lang/Object;)Z
            ifeq 7
         5: .line 256
            aload 3 /* list */
            iconst_1
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.lang.String
            astore 4 /* temp */
        start local 4 // java.lang.String temp
         6: .line 257
            aload 4 /* temp */
            aload 1 /* pkixParams */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.addAdditionalStoreFromLocation:(Ljava/lang/String;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
        end local 4 // java.lang.String temp
        end local 3 // java.util.List list
         7: .line 249
      StackMap locals:
      StackMap stack:
            aload 2 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 3
        end local 2 // java.util.Iterator it
         8: .line 261
      StackMap locals:
      StackMap stack:
            return
        end local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0    9     0        cert  Ljava/security/cert/X509Certificate;
            0    9     1  pkixParams  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            2    8     2          it  Ljava/util/Iterator;
            4    7     3        list  Ljava/util/List;
            6    7     4        temp  Ljava/lang/String;
    Exceptions:
      throws java.security.cert.CertificateParsingException
    MethodParameters:
            Name  Flags
      cert        
      pkixParams  

  protected static javax.security.auth.x500.X500Principal getEncodedIssuerPrincipal(java.lang.Object);
    descriptor: (Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.lang.Object cert
         0: .line 270
            aload 0 /* cert */
            instanceof java.security.cert.X509Certificate
            ifeq 2
         1: .line 272
            aload 0 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            areturn
         2: .line 276
      StackMap locals:
      StackMap stack:
            aload 0 /* cert */
            checkcast org.bouncycastle.x509.X509AttributeCertificate
            invokeinterface org.bouncycastle.x509.X509AttributeCertificate.getIssuer:()Lorg/bouncycastle/x509/AttributeCertificateIssuer;
            invokevirtual org.bouncycastle.x509.AttributeCertificateIssuer.getPrincipals:()[Ljava/security/Principal;
            iconst_0
            aaload
            checkcast javax.security.auth.x500.X500Principal
            areturn
        end local 0 // java.lang.Object cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    3     0  cert  Ljava/lang/Object;
    MethodParameters:
      Name  Flags
      cert  

  protected static java.util.Date getValidDate(java.security.cert.PKIXParameters);
    descriptor: (Ljava/security/cert/PKIXParameters;)Ljava/util/Date;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=2, args_size=1
        start local 0 // java.security.cert.PKIXParameters paramsPKIX
         0: .line 282
            aload 0 /* paramsPKIX */
            invokevirtual java.security.cert.PKIXParameters.getDate:()Ljava/util/Date;
            astore 1 /* validDate */
        start local 1 // java.util.Date validDate
         1: .line 284
            aload 1 /* validDate */
            ifnonnull 3
         2: .line 286
            new java.util.Date
            dup
            invokespecial java.util.Date.<init>:()V
            astore 1 /* validDate */
         3: .line 289
      StackMap locals: java.util.Date
      StackMap stack:
            aload 1 /* validDate */
            areturn
        end local 1 // java.util.Date validDate
        end local 0 // java.security.cert.PKIXParameters paramsPKIX
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0    4     0  paramsPKIX  Ljava/security/cert/PKIXParameters;
            1    4     1   validDate  Ljava/util/Date;
    MethodParameters:
            Name  Flags
      paramsPKIX  

  protected static javax.security.auth.x500.X500Principal getSubjectPrincipal(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Ljavax/security/auth/x500/X500Principal;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // java.security.cert.X509Certificate cert
         0: .line 294
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            areturn
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  cert  Ljava/security/cert/X509Certificate;
    MethodParameters:
      Name  Flags
      cert  

  protected static boolean isSelfIssued(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Z
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.security.cert.X509Certificate cert
         0: .line 299
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectDN:()Ljava/security/Principal;
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerDN:()Ljava/security/Principal;
            invokeinterface java.security.Principal.equals:(Ljava/lang/Object;)Z
            ireturn
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  cert  Ljava/security/cert/X509Certificate;
    MethodParameters:
      Name  Flags
      cert  

  protected static org.bouncycastle.asn1.DERObject getExtensionValue(java.security.cert.X509Extension, java.lang.String);
    descriptor: (Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/bouncycastle/asn1/DERObject;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=3, args_size=2
        start local 0 // java.security.cert.X509Extension ext
        start local 1 // java.lang.String oid
         0: .line 318
            aload 0 /* ext */
            aload 1 /* oid */
            invokeinterface java.security.cert.X509Extension.getExtensionValue:(Ljava/lang/String;)[B
            astore 2 /* bytes */
        start local 2 // byte[] bytes
         1: .line 319
            aload 2 /* bytes */
            ifnonnull 3
         2: .line 321
            aconst_null
            areturn
         3: .line 324
      StackMap locals: byte[]
      StackMap stack:
            aload 1 /* oid */
            aload 2 /* bytes */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getObject:(Ljava/lang/String;[B)Lorg/bouncycastle/asn1/DERObject;
            areturn
        end local 2 // byte[] bytes
        end local 1 // java.lang.String oid
        end local 0 // java.security.cert.X509Extension ext
      LocalVariableTable:
        Start  End  Slot   Name  Signature
            0    4     0    ext  Ljava/security/cert/X509Extension;
            0    4     1    oid  Ljava/lang/String;
            1    4     2  bytes  [B
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
      Name  Flags
      ext   
      oid   

  private static org.bouncycastle.asn1.DERObject getObject(java.lang.String, byte[]);
    descriptor: (Ljava/lang/String;[B)Lorg/bouncycastle/asn1/DERObject;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=5, locals=4, args_size=2
        start local 0 // java.lang.String oid
        start local 1 // byte[] ext
         0: .line 334
            new org.bouncycastle.asn1.ASN1InputStream
            dup
            aload 1 /* ext */
            invokespecial org.bouncycastle.asn1.ASN1InputStream.<init>:([B)V
            astore 2 /* aIn */
        start local 2 // org.bouncycastle.asn1.ASN1InputStream aIn
         1: .line 335
            aload 2 /* aIn */
            invokevirtual org.bouncycastle.asn1.ASN1InputStream.readObject:()Lorg/bouncycastle/asn1/DERObject;
            checkcast org.bouncycastle.asn1.ASN1OctetString
            astore 3 /* octs */
        start local 3 // org.bouncycastle.asn1.ASN1OctetString octs
         2: .line 337
            new org.bouncycastle.asn1.ASN1InputStream
            dup
            aload 3 /* octs */
            invokevirtual org.bouncycastle.asn1.ASN1OctetString.getOctets:()[B
            invokespecial org.bouncycastle.asn1.ASN1InputStream.<init>:([B)V
            astore 2 /* aIn */
         3: .line 338
            aload 2 /* aIn */
            invokevirtual org.bouncycastle.asn1.ASN1InputStream.readObject:()Lorg/bouncycastle/asn1/DERObject;
         4: areturn
        end local 3 // org.bouncycastle.asn1.ASN1OctetString octs
        end local 2 // org.bouncycastle.asn1.ASN1InputStream aIn
         5: .line 340
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 2 /* e */
        start local 2 // java.lang.Exception e
         6: .line 342
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            new java.lang.StringBuilder
            dup
            ldc "exception processing extension "
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* oid */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            aload 2 /* e */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 2 // java.lang.Exception e
        end local 1 // byte[] ext
        end local 0 // java.lang.String oid
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    7     0   oid  Ljava/lang/String;
            0    7     1   ext  [B
            1    5     2   aIn  Lorg/bouncycastle/asn1/ASN1InputStream;
            2    5     3  octs  Lorg/bouncycastle/asn1/ASN1OctetString;
            6    7     2     e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0     4       5  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
      Name  Flags
      oid   
      ext   

  protected static javax.security.auth.x500.X500Principal getIssuerPrincipal(java.security.cert.X509CRL);
    descriptor: (Ljava/security/cert/X509CRL;)Ljavax/security/auth/x500/X500Principal;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // java.security.cert.X509CRL crl
         0: .line 348
            aload 0 /* crl */
            invokevirtual java.security.cert.X509CRL.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            areturn
        end local 0 // java.security.cert.X509CRL crl
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0   crl  Ljava/security/cert/X509CRL;
    MethodParameters:
      Name  Flags
      crl   

  protected static org.bouncycastle.asn1.x509.AlgorithmIdentifier getAlgorithmIdentifier(java.security.PublicKey);
    descriptor: (Ljava/security/PublicKey;)Lorg/bouncycastle/asn1/x509/AlgorithmIdentifier;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=3, args_size=1
        start local 0 // java.security.PublicKey key
         0: .line 357
            new org.bouncycastle.asn1.ASN1InputStream
            dup
            aload 0 /* key */
            invokeinterface java.security.PublicKey.getEncoded:()[B
            invokespecial org.bouncycastle.asn1.ASN1InputStream.<init>:([B)V
            astore 1 /* aIn */
        start local 1 // org.bouncycastle.asn1.ASN1InputStream aIn
         1: .line 359
            aload 1 /* aIn */
            invokevirtual org.bouncycastle.asn1.ASN1InputStream.readObject:()Lorg/bouncycastle/asn1/DERObject;
            invokestatic org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/SubjectPublicKeyInfo;
            astore 2 /* info */
        start local 2 // org.bouncycastle.asn1.x509.SubjectPublicKeyInfo info
         2: .line 361
            aload 2 /* info */
            invokevirtual org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getAlgorithmId:()Lorg/bouncycastle/asn1/x509/AlgorithmIdentifier;
         3: areturn
        end local 2 // org.bouncycastle.asn1.x509.SubjectPublicKeyInfo info
        end local 1 // org.bouncycastle.asn1.ASN1InputStream aIn
         4: .line 363
      StackMap locals:
      StackMap stack: java.lang.Exception
            astore 1 /* e */
        start local 1 // java.lang.Exception e
         5: .line 365
            new org.bouncycastle.jce.exception.ExtCertPathValidatorException
            dup
            ldc "Subject public key cannot be decoded."
            aload 1 /* e */
            invokespecial org.bouncycastle.jce.exception.ExtCertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 1 // java.lang.Exception e
        end local 0 // java.security.PublicKey key
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    6     0   key  Ljava/security/PublicKey;
            1    4     1   aIn  Lorg/bouncycastle/asn1/ASN1InputStream;
            2    4     2  info  Lorg/bouncycastle/asn1/x509/SubjectPublicKeyInfo;
            5    6     1     e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           0     3       4  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
      Name  Flags
      key   

  protected static final java.util.Set getQualifierSet(org.bouncycastle.asn1.ASN1Sequence);
    descriptor: (Lorg/bouncycastle/asn1/ASN1Sequence;)Ljava/util/Set;
    flags: (0x001c) ACC_PROTECTED, ACC_STATIC, ACC_FINAL
    Code:
      stack=4, locals=6, args_size=1
        start local 0 // org.bouncycastle.asn1.ASN1Sequence qualifiers
         0: .line 379
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 1 /* pq */
        start local 1 // java.util.Set pq
         1: .line 381
            aload 0 /* qualifiers */
            ifnonnull 3
         2: .line 383
            aload 1 /* pq */
            areturn
         3: .line 386
      StackMap locals: java.util.Set
      StackMap stack:
            new java.io.ByteArrayOutputStream
            dup
            invokespecial java.io.ByteArrayOutputStream.<init>:()V
            astore 2 /* bOut */
        start local 2 // java.io.ByteArrayOutputStream bOut
         4: .line 387
            new org.bouncycastle.asn1.ASN1OutputStream
            dup
            aload 2 /* bOut */
            invokespecial org.bouncycastle.asn1.ASN1OutputStream.<init>:(Ljava/io/OutputStream;)V
            astore 3 /* aOut */
        start local 3 // org.bouncycastle.asn1.ASN1OutputStream aOut
         5: .line 389
            aload 0 /* qualifiers */
            invokevirtual org.bouncycastle.asn1.ASN1Sequence.getObjects:()Ljava/util/Enumeration;
            astore 4 /* e */
        start local 4 // java.util.Enumeration e
         6: .line 391
            goto 13
         7: .line 395
      StackMap locals: java.io.ByteArrayOutputStream org.bouncycastle.asn1.ASN1OutputStream java.util.Enumeration
      StackMap stack:
            aload 3 /* aOut */
            aload 4 /* e */
            invokeinterface java.util.Enumeration.nextElement:()Ljava/lang/Object;
            invokevirtual org.bouncycastle.asn1.ASN1OutputStream.writeObject:(Ljava/lang/Object;)V
         8: .line 397
            aload 1 /* pq */
            new java.security.cert.PolicyQualifierInfo
            dup
            aload 2 /* bOut */
            invokevirtual java.io.ByteArrayOutputStream.toByteArray:()[B
            invokespecial java.security.cert.PolicyQualifierInfo.<init>:([B)V
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         9: .line 398
            goto 12
        10: .line 399
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 5 /* ex */
        start local 5 // java.io.IOException ex
        11: .line 401
            new org.bouncycastle.jce.exception.ExtCertPathValidatorException
            dup
            ldc "Policy qualifier info cannot be decoded."
            aload 5 /* ex */
            invokespecial org.bouncycastle.jce.exception.ExtCertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // java.io.IOException ex
        12: .line 404
      StackMap locals:
      StackMap stack:
            aload 2 /* bOut */
            invokevirtual java.io.ByteArrayOutputStream.reset:()V
        13: .line 391
      StackMap locals:
      StackMap stack:
            aload 4 /* e */
            invokeinterface java.util.Enumeration.hasMoreElements:()Z
            ifne 7
        14: .line 407
            aload 1 /* pq */
            areturn
        end local 4 // java.util.Enumeration e
        end local 3 // org.bouncycastle.asn1.ASN1OutputStream aOut
        end local 2 // java.io.ByteArrayOutputStream bOut
        end local 1 // java.util.Set pq
        end local 0 // org.bouncycastle.asn1.ASN1Sequence qualifiers
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   15     0  qualifiers  Lorg/bouncycastle/asn1/ASN1Sequence;
            1   15     1          pq  Ljava/util/Set;
            4   15     2        bOut  Ljava/io/ByteArrayOutputStream;
            5   15     3        aOut  Lorg/bouncycastle/asn1/ASN1OutputStream;
            6   15     4           e  Ljava/util/Enumeration;
           11   12     5          ex  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           7     9      10  Class java.io.IOException
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
            Name  Flags
      qualifiers  

  protected static org.bouncycastle.jce.provider.PKIXPolicyNode removePolicyNode(org.bouncycastle.jce.provider.PKIXPolicyNode, java.util.List[], org.bouncycastle.jce.provider.PKIXPolicyNode);
    descriptor: (Lorg/bouncycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=5, args_size=3
        start local 0 // org.bouncycastle.jce.provider.PKIXPolicyNode validPolicyTree
        start local 1 // java.util.List[] policyNodes
        start local 2 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
         0: .line 415
            aload 2 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getParent:()Ljava/security/cert/PolicyNode;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 3 /* _parent */
        start local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode _parent
         1: .line 417
            aload 0 /* validPolicyTree */
            ifnonnull 3
         2: .line 419
            aconst_null
            areturn
         3: .line 422
      StackMap locals: org.bouncycastle.jce.provider.PKIXPolicyNode
      StackMap stack:
            aload 3 /* _parent */
            ifnonnull 10
         4: .line 424
            iconst_0
            istore 4 /* j */
        start local 4 // int j
         5: goto 8
         6: .line 426
      StackMap locals: int
      StackMap stack:
            aload 1 /* policyNodes */
            iload 4 /* j */
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            aastore
         7: .line 424
            iinc 4 /* j */ 1
      StackMap locals:
      StackMap stack:
         8: iload 4 /* j */
            aload 1 /* policyNodes */
            arraylength
            if_icmplt 6
        end local 4 // int j
         9: .line 429
            aconst_null
            areturn
        10: .line 433
      StackMap locals:
      StackMap stack:
            aload 3 /* _parent */
            aload 2 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.removeChild:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        11: .line 434
            aload 1 /* policyNodes */
            aload 2 /* _node */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.removePolicyNodeRecurse:([Ljava/util/List;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        12: .line 436
            aload 0 /* validPolicyTree */
            areturn
        end local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode _parent
        end local 2 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
        end local 1 // java.util.List[] policyNodes
        end local 0 // org.bouncycastle.jce.provider.PKIXPolicyNode validPolicyTree
      LocalVariableTable:
        Start  End  Slot             Name  Signature
            0   13     0  validPolicyTree  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            0   13     1      policyNodes  [Ljava/util/List;
            0   13     2            _node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            1   13     3          _parent  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            5    9     4                j  I
    MethodParameters:
                 Name  Flags
      validPolicyTree  
      policyNodes      
      _node            

  private static void removePolicyNodeRecurse(java.util.List[], org.bouncycastle.jce.provider.PKIXPolicyNode);
    descriptor: ([Ljava/util/List;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=4, args_size=2
        start local 0 // java.util.List[] policyNodes
        start local 1 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
         0: .line 444
            aload 0 /* policyNodes */
            aload 1 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getDepth:()I
            aaload
            aload 1 /* _node */
            invokeinterface java.util.List.remove:(Ljava/lang/Object;)Z
            pop
         1: .line 446
            aload 1 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.hasChildren:()Z
            ifeq 7
         2: .line 448
            aload 1 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getChildren:()Ljava/util/Iterator;
            astore 2 /* _iter */
        start local 2 // java.util.Iterator _iter
         3: .line 449
            goto 6
         4: .line 451
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 2 /* _iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 3 /* _child */
        start local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode _child
         5: .line 452
            aload 0 /* policyNodes */
            aload 3 /* _child */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.removePolicyNodeRecurse:([Ljava/util/List;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        end local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode _child
         6: .line 449
      StackMap locals:
      StackMap stack:
            aload 2 /* _iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 4
        end local 2 // java.util.Iterator _iter
         7: .line 455
      StackMap locals:
      StackMap stack:
            return
        end local 1 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
        end local 0 // java.util.List[] policyNodes
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0    8     0  policyNodes  [Ljava/util/List;
            0    8     1        _node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            3    7     2        _iter  Ljava/util/Iterator;
            5    6     3       _child  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    MethodParameters:
             Name  Flags
      policyNodes  
      _node        

  protected static boolean processCertD1i(int, java.util.List[], org.bouncycastle.asn1.DERObjectIdentifier, java.util.Set);
    descriptor: (I[Ljava/util/List;Lorg/bouncycastle/asn1/DERObjectIdentifier;Ljava/util/Set;)Z
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=9, locals=10, args_size=4
        start local 0 // int index
        start local 1 // java.util.List[] policyNodes
        start local 2 // org.bouncycastle.asn1.DERObjectIdentifier pOid
        start local 3 // java.util.Set pq
         0: .line 464
            aload 1 /* policyNodes */
            iload 0 /* index */
            iconst_1
            isub
            aaload
            astore 4 /* policyNodeVec */
        start local 4 // java.util.List policyNodeVec
         1: .line 466
            iconst_0
            istore 5 /* j */
        start local 5 // int j
         2: goto 20
         3: .line 468
      StackMap locals: java.util.List int
      StackMap stack:
            aload 4 /* policyNodeVec */
            iload 5 /* j */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 6 /* node */
        start local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode node
         4: .line 469
            aload 6 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getExpectedPolicies:()Ljava/util/Set;
            astore 7 /* expectedPolicies */
        start local 7 // java.util.Set expectedPolicies
         5: .line 471
            aload 7 /* expectedPolicies */
            aload 2 /* pOid */
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifeq 19
         6: .line 473
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 8 /* childExpectedPolicies */
        start local 8 // java.util.Set childExpectedPolicies
         7: .line 474
            aload 8 /* childExpectedPolicies */
            aload 2 /* pOid */
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         8: .line 476
            new org.bouncycastle.jce.provider.PKIXPolicyNode
            dup
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
         9: .line 477
            iload 0 /* index */
        10: .line 478
            aload 8 /* childExpectedPolicies */
        11: .line 479
            aload 6 /* node */
        12: .line 480
            aload 3 /* pq */
        13: .line 481
            aload 2 /* pOid */
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
        14: .line 482
            iconst_0
        15: .line 476
            invokespecial org.bouncycastle.jce.provider.PKIXPolicyNode.<init>:(Ljava/util/List;ILjava/util/Set;Ljava/security/cert/PolicyNode;Ljava/util/Set;Ljava/lang/String;Z)V
            astore 9 /* child */
        start local 9 // org.bouncycastle.jce.provider.PKIXPolicyNode child
        16: .line 483
            aload 6 /* node */
            aload 9 /* child */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.addChild:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        17: .line 484
            aload 1 /* policyNodes */
            iload 0 /* index */
            aaload
            aload 9 /* child */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        18: .line 486
            iconst_1
            ireturn
        end local 9 // org.bouncycastle.jce.provider.PKIXPolicyNode child
        end local 8 // java.util.Set childExpectedPolicies
        end local 7 // java.util.Set expectedPolicies
        end local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode node
        19: .line 466
      StackMap locals:
      StackMap stack:
            iinc 5 /* j */ 1
      StackMap locals:
      StackMap stack:
        20: iload 5 /* j */
            aload 4 /* policyNodeVec */
            invokeinterface java.util.List.size:()I
            if_icmplt 3
        end local 5 // int j
        21: .line 490
            iconst_0
            ireturn
        end local 4 // java.util.List policyNodeVec
        end local 3 // java.util.Set pq
        end local 2 // org.bouncycastle.asn1.DERObjectIdentifier pOid
        end local 1 // java.util.List[] policyNodes
        end local 0 // int index
      LocalVariableTable:
        Start  End  Slot                   Name  Signature
            0   22     0                  index  I
            0   22     1            policyNodes  [Ljava/util/List;
            0   22     2                   pOid  Lorg/bouncycastle/asn1/DERObjectIdentifier;
            0   22     3                     pq  Ljava/util/Set;
            1   22     4          policyNodeVec  Ljava/util/List;
            2   21     5                      j  I
            4   19     6                   node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            5   19     7       expectedPolicies  Ljava/util/Set;
            7   19     8  childExpectedPolicies  Ljava/util/Set;
           16   19     9                  child  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    MethodParameters:
             Name  Flags
      index        
      policyNodes  
      pOid         
      pq           

  protected static void processCertD1ii(int, java.util.List[], org.bouncycastle.asn1.DERObjectIdentifier, java.util.Set);
    descriptor: (I[Ljava/util/List;Lorg/bouncycastle/asn1/DERObjectIdentifier;Ljava/util/Set;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=9, locals=9, args_size=4
        start local 0 // int index
        start local 1 // java.util.List[] policyNodes
        start local 2 // org.bouncycastle.asn1.DERObjectIdentifier _poid
        start local 3 // java.util.Set _pq
         0: .line 499
            aload 1 /* policyNodes */
            iload 0 /* index */
            iconst_1
            isub
            aaload
            astore 4 /* policyNodeVec */
        start local 4 // java.util.List policyNodeVec
         1: .line 501
            iconst_0
            istore 5 /* j */
        start local 5 // int j
         2: goto 19
         3: .line 503
      StackMap locals: java.util.List int
      StackMap stack:
            aload 4 /* policyNodeVec */
            iload 5 /* j */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 6 /* _node */
        start local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
         4: .line 505
            ldc "2.5.29.32.0"
            aload 6 /* _node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getValidPolicy:()Ljava/lang/String;
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 18
         5: .line 507
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 7 /* _childExpectedPolicies */
        start local 7 // java.util.Set _childExpectedPolicies
         6: .line 508
            aload 7 /* _childExpectedPolicies */
            aload 2 /* _poid */
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         7: .line 510
            new org.bouncycastle.jce.provider.PKIXPolicyNode
            dup
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
         8: .line 511
            iload 0 /* index */
         9: .line 512
            aload 7 /* _childExpectedPolicies */
        10: .line 513
            aload 6 /* _node */
        11: .line 514
            aload 3 /* _pq */
        12: .line 515
            aload 2 /* _poid */
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
        13: .line 516
            iconst_0
        14: .line 510
            invokespecial org.bouncycastle.jce.provider.PKIXPolicyNode.<init>:(Ljava/util/List;ILjava/util/Set;Ljava/security/cert/PolicyNode;Ljava/util/Set;Ljava/lang/String;Z)V
            astore 8 /* _child */
        start local 8 // org.bouncycastle.jce.provider.PKIXPolicyNode _child
        15: .line 517
            aload 6 /* _node */
            aload 8 /* _child */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.addChild:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        16: .line 518
            aload 1 /* policyNodes */
            iload 0 /* index */
            aaload
            aload 8 /* _child */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        17: .line 519
            return
        end local 8 // org.bouncycastle.jce.provider.PKIXPolicyNode _child
        end local 7 // java.util.Set _childExpectedPolicies
        end local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode _node
        18: .line 501
      StackMap locals:
      StackMap stack:
            iinc 5 /* j */ 1
      StackMap locals:
      StackMap stack:
        19: iload 5 /* j */
            aload 4 /* policyNodeVec */
            invokeinterface java.util.List.size:()I
            if_icmplt 3
        end local 5 // int j
        20: .line 522
            return
        end local 4 // java.util.List policyNodeVec
        end local 3 // java.util.Set _pq
        end local 2 // org.bouncycastle.asn1.DERObjectIdentifier _poid
        end local 1 // java.util.List[] policyNodes
        end local 0 // int index
      LocalVariableTable:
        Start  End  Slot                    Name  Signature
            0   21     0                   index  I
            0   21     1             policyNodes  [Ljava/util/List;
            0   21     2                   _poid  Lorg/bouncycastle/asn1/DERObjectIdentifier;
            0   21     3                     _pq  Ljava/util/Set;
            1   21     4           policyNodeVec  Ljava/util/List;
            2   20     5                       j  I
            4   18     6                   _node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            6   18     7  _childExpectedPolicies  Ljava/util/Set;
           15   18     8                  _child  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    MethodParameters:
             Name  Flags
      index        
      policyNodes  
      _poid        
      _pq          

  protected static void prepareNextCertB1(int, java.util.List[], java.lang.String, java.util.Map, java.security.cert.X509Certificate);
    descriptor: (I[Ljava/util/List;Ljava/lang/String;Ljava/util/Map;Ljava/security/cert/X509Certificate;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=9, locals=14, args_size=5
        start local 0 // int i
        start local 1 // java.util.List[] policyNodes
        start local 2 // java.lang.String id_p
        start local 3 // java.util.Map m_idp
        start local 4 // java.security.cert.X509Certificate cert
         0: .line 532
            iconst_0
            istore 5 /* idp_found */
        start local 5 // boolean idp_found
         1: .line 533
            aload 1 /* policyNodes */
            iload 0 /* i */
            aaload
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 6 /* nodes_i */
        start local 6 // java.util.Iterator nodes_i
         2: .line 534
            goto 8
         3: .line 536
      StackMap locals: int java.util.Iterator
      StackMap stack:
            aload 6 /* nodes_i */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 7 /* node */
        start local 7 // org.bouncycastle.jce.provider.PKIXPolicyNode node
         4: .line 537
            aload 7 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getValidPolicy:()Ljava/lang/String;
            aload 2 /* id_p */
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 8
         5: .line 539
            iconst_1
            istore 5 /* idp_found */
         6: .line 540
            aload 7 /* node */
            aload 3 /* m_idp */
            aload 2 /* id_p */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.Set
            putfield org.bouncycastle.jce.provider.PKIXPolicyNode.expectedPolicies:Ljava/util/Set;
         7: .line 541
            goto 9
        end local 7 // org.bouncycastle.jce.provider.PKIXPolicyNode node
         8: .line 534
      StackMap locals:
      StackMap stack:
            aload 6 /* nodes_i */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 3
         9: .line 545
      StackMap locals:
      StackMap stack:
            iload 5 /* idp_found */
            ifne 50
        10: .line 547
            aload 1 /* policyNodes */
            iload 0 /* i */
            aaload
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 6 /* nodes_i */
        11: .line 548
            goto 49
        12: .line 550
      StackMap locals:
      StackMap stack:
            aload 6 /* nodes_i */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 7 /* node */
        start local 7 // org.bouncycastle.jce.provider.PKIXPolicyNode node
        13: .line 551
            ldc "2.5.29.32.0"
            aload 7 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getValidPolicy:()Ljava/lang/String;
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 49
        14: .line 553
            aconst_null
            astore 8 /* pq */
        start local 8 // java.util.Set pq
        15: .line 554
            aconst_null
            astore 9 /* policies */
        start local 9 // org.bouncycastle.asn1.ASN1Sequence policies
        16: .line 557
            aload 4 /* cert */
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CERTIFICATE_POLICIES:Ljava/lang/String;
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/bouncycastle/asn1/DERObject;
            invokestatic org.bouncycastle.asn1.DERSequence.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/ASN1Sequence;
            astore 9 /* policies */
        17: .line 558
            goto 21
        18: .line 559
      StackMap locals: int java.util.List[] java.lang.String java.util.Map java.security.cert.X509Certificate int java.util.Iterator org.bouncycastle.jce.provider.PKIXPolicyNode java.util.Set org.bouncycastle.asn1.ASN1Sequence
      StackMap stack: java.lang.Exception
            astore 10 /* e */
        start local 10 // java.lang.Exception e
        19: .line 563
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "Certificate policies cannot be decoded."
            aload 10 /* e */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        20: .line 561
            athrow
        end local 10 // java.lang.Exception e
        21: .line 565
      StackMap locals:
      StackMap stack:
            aload 9 /* policies */
            invokevirtual org.bouncycastle.asn1.ASN1Sequence.getObjects:()Ljava/util/Enumeration;
            astore 10 /* e */
        start local 10 // java.util.Enumeration e
        22: .line 566
            goto 35
        23: .line 568
      StackMap locals: java.util.Enumeration
      StackMap stack:
            aconst_null
            astore 11 /* pinfo */
        start local 11 // org.bouncycastle.asn1.x509.PolicyInformation pinfo
        24: .line 572
            aload 10 /* e */
            invokeinterface java.util.Enumeration.nextElement:()Ljava/lang/Object;
            invokestatic org.bouncycastle.asn1.x509.PolicyInformation.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/PolicyInformation;
            astore 11 /* pinfo */
        25: .line 573
            goto 28
        26: .line 574
      StackMap locals: int java.util.List[] java.lang.String java.util.Map java.security.cert.X509Certificate int java.util.Iterator org.bouncycastle.jce.provider.PKIXPolicyNode java.util.Set org.bouncycastle.asn1.ASN1Sequence java.util.Enumeration org.bouncycastle.asn1.x509.PolicyInformation
      StackMap stack: java.lang.Exception
            astore 12 /* ex */
        start local 12 // java.lang.Exception ex
        27: .line 576
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "Policy information cannot be decoded."
            aload 12 /* ex */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 12 // java.lang.Exception ex
        28: .line 578
      StackMap locals:
      StackMap stack:
            ldc "2.5.29.32.0"
            aload 11 /* pinfo */
            invokevirtual org.bouncycastle.asn1.x509.PolicyInformation.getPolicyIdentifier:()Lorg/bouncycastle/asn1/DERObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.DERObjectIdentifier.getId:()Ljava/lang/String;
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 35
        29: .line 582
            aload 11 /* pinfo */
            invokevirtual org.bouncycastle.asn1.x509.PolicyInformation.getPolicyQualifiers:()Lorg/bouncycastle/asn1/ASN1Sequence;
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getQualifierSet:(Lorg/bouncycastle/asn1/ASN1Sequence;)Ljava/util/Set;
            astore 8 /* pq */
        30: .line 583
            goto 36
        31: .line 584
      StackMap locals:
      StackMap stack: java.security.cert.CertPathValidatorException
            astore 12 /* ex */
        start local 12 // java.security.cert.CertPathValidatorException ex
        32: .line 586
            new org.bouncycastle.jce.exception.ExtCertPathValidatorException
            dup
        33: .line 587
            ldc "Policy qualifier info set could not be built."
            aload 12 /* ex */
        34: .line 586
            invokespecial org.bouncycastle.jce.exception.ExtCertPathValidatorException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 12 // java.security.cert.CertPathValidatorException ex
        end local 11 // org.bouncycastle.asn1.x509.PolicyInformation pinfo
        35: .line 566
      StackMap locals:
      StackMap stack:
            aload 10 /* e */
            invokeinterface java.util.Enumeration.hasMoreElements:()Z
            ifne 23
        36: .line 592
      StackMap locals:
      StackMap stack:
            iconst_0
            istore 11 /* ci */
        start local 11 // boolean ci
        37: .line 593
            aload 4 /* cert */
            invokevirtual java.security.cert.X509Certificate.getCriticalExtensionOIDs:()Ljava/util/Set;
            ifnull 39
        38: .line 595
            aload 4 /* cert */
            invokevirtual java.security.cert.X509Certificate.getCriticalExtensionOIDs:()Ljava/util/Set;
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CERTIFICATE_POLICIES:Ljava/lang/String;
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            istore 11 /* ci */
        39: .line 598
      StackMap locals: int
      StackMap stack:
            aload 7 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getParent:()Ljava/security/cert/PolicyNode;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 12 /* p_node */
        start local 12 // org.bouncycastle.jce.provider.PKIXPolicyNode p_node
        40: .line 599
            ldc "2.5.29.32.0"
            aload 12 /* p_node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getValidPolicy:()Ljava/lang/String;
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 50
        41: .line 601
            new org.bouncycastle.jce.provider.PKIXPolicyNode
            dup
        42: .line 602
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            iload 0 /* i */
        43: .line 603
            aload 3 /* m_idp */
            aload 2 /* id_p */
            invokeinterface java.util.Map.get:(Ljava/lang/Object;)Ljava/lang/Object;
            checkcast java.util.Set
        44: .line 604
            aload 12 /* p_node */
            aload 8 /* pq */
            aload 2 /* id_p */
            iload 11 /* ci */
        45: .line 601
            invokespecial org.bouncycastle.jce.provider.PKIXPolicyNode.<init>:(Ljava/util/List;ILjava/util/Set;Ljava/security/cert/PolicyNode;Ljava/util/Set;Ljava/lang/String;Z)V
            astore 13 /* c_node */
        start local 13 // org.bouncycastle.jce.provider.PKIXPolicyNode c_node
        46: .line 605
            aload 12 /* p_node */
            aload 13 /* c_node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.addChild:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
        47: .line 606
            aload 1 /* policyNodes */
            iload 0 /* i */
            aaload
            aload 13 /* c_node */
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        end local 13 // org.bouncycastle.jce.provider.PKIXPolicyNode c_node
        48: .line 608
            goto 50
        end local 12 // org.bouncycastle.jce.provider.PKIXPolicyNode p_node
        end local 11 // boolean ci
        end local 10 // java.util.Enumeration e
        end local 9 // org.bouncycastle.asn1.ASN1Sequence policies
        end local 8 // java.util.Set pq
        end local 7 // org.bouncycastle.jce.provider.PKIXPolicyNode node
        49: .line 548
      StackMap locals: int java.util.List[] java.lang.String java.util.Map java.security.cert.X509Certificate int java.util.Iterator
      StackMap stack:
            aload 6 /* nodes_i */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 12
        50: .line 612
      StackMap locals:
      StackMap stack:
            return
        end local 6 // java.util.Iterator nodes_i
        end local 5 // boolean idp_found
        end local 4 // java.security.cert.X509Certificate cert
        end local 3 // java.util.Map m_idp
        end local 2 // java.lang.String id_p
        end local 1 // java.util.List[] policyNodes
        end local 0 // int i
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0   51     0            i  I
            0   51     1  policyNodes  [Ljava/util/List;
            0   51     2         id_p  Ljava/lang/String;
            0   51     3        m_idp  Ljava/util/Map;
            0   51     4         cert  Ljava/security/cert/X509Certificate;
            1   51     5    idp_found  Z
            2   51     6      nodes_i  Ljava/util/Iterator;
            4    8     7         node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
           13   49     7         node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
           15   49     8           pq  Ljava/util/Set;
           16   49     9     policies  Lorg/bouncycastle/asn1/ASN1Sequence;
           19   21    10            e  Ljava/lang/Exception;
           22   49    10            e  Ljava/util/Enumeration;
           24   35    11        pinfo  Lorg/bouncycastle/asn1/x509/PolicyInformation;
           27   28    12           ex  Ljava/lang/Exception;
           32   35    12           ex  Ljava/security/cert/CertPathValidatorException;
           37   49    11           ci  Z
           40   49    12       p_node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
           46   48    13       c_node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
      Exception table:
        from    to  target  type
          16    17      18  Class java.lang.Exception
          24    25      26  Class java.lang.Exception
          29    30      31  Class java.security.cert.CertPathValidatorException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException, java.security.cert.CertPathValidatorException
    MethodParameters:
             Name  Flags
      i            
      policyNodes  
      id_p         
      m_idp        
      cert         

  protected static org.bouncycastle.jce.provider.PKIXPolicyNode prepareNextCertB2(int, java.util.List[], java.lang.String, org.bouncycastle.jce.provider.PKIXPolicyNode);
    descriptor: (I[Ljava/util/List;Ljava/lang/String;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=3, locals=11, args_size=4
        start local 0 // int i
        start local 1 // java.util.List[] policyNodes
        start local 2 // java.lang.String id_p
        start local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode validPolicyTree
         0: .line 620
            aload 1 /* policyNodes */
            iload 0 /* i */
            aaload
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 4 /* nodes_i */
        start local 4 // java.util.Iterator nodes_i
         1: .line 621
            goto 21
         2: .line 623
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 4 /* nodes_i */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 5 /* node */
        start local 5 // org.bouncycastle.jce.provider.PKIXPolicyNode node
         3: .line 624
            aload 5 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getValidPolicy:()Ljava/lang/String;
            aload 2 /* id_p */
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifeq 21
         4: .line 626
            aload 5 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.getParent:()Ljava/security/cert/PolicyNode;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 6 /* p_node */
        start local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode p_node
         5: .line 627
            aload 6 /* p_node */
            aload 5 /* node */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.removeChild:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)V
         6: .line 628
            aload 4 /* nodes_i */
            invokeinterface java.util.Iterator.remove:()V
         7: .line 629
            iload 0 /* i */
            iconst_1
            isub
            istore 7 /* k */
        start local 7 // int k
         8: goto 20
         9: .line 631
      StackMap locals: org.bouncycastle.jce.provider.PKIXPolicyNode org.bouncycastle.jce.provider.PKIXPolicyNode int
      StackMap stack:
            aload 1 /* policyNodes */
            iload 7 /* k */
            aaload
            astore 8 /* nodes */
        start local 8 // java.util.List nodes
        10: .line 632
            iconst_0
            istore 9 /* l */
        start local 9 // int l
        11: goto 18
        12: .line 634
      StackMap locals: java.util.List int
      StackMap stack:
            aload 8 /* nodes */
            iload 9 /* l */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast org.bouncycastle.jce.provider.PKIXPolicyNode
            astore 10 /* node2 */
        start local 10 // org.bouncycastle.jce.provider.PKIXPolicyNode node2
        13: .line 635
            aload 10 /* node2 */
            invokevirtual org.bouncycastle.jce.provider.PKIXPolicyNode.hasChildren:()Z
            ifne 17
        14: .line 637
            aload 3 /* validPolicyTree */
            aload 1 /* policyNodes */
            aload 10 /* node2 */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.removePolicyNode:(Lorg/bouncycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/bouncycastle/jce/provider/PKIXPolicyNode;)Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            astore 3 /* validPolicyTree */
        15: .line 638
            aload 3 /* validPolicyTree */
            ifnonnull 17
        16: .line 640
            goto 19
        end local 10 // org.bouncycastle.jce.provider.PKIXPolicyNode node2
        17: .line 632
      StackMap locals:
      StackMap stack:
            iinc 9 /* l */ 1
      StackMap locals:
      StackMap stack:
        18: iload 9 /* l */
            aload 8 /* nodes */
            invokeinterface java.util.List.size:()I
            if_icmplt 12
        end local 9 // int l
        end local 8 // java.util.List nodes
        19: .line 629
      StackMap locals:
      StackMap stack:
            iinc 7 /* k */ -1
      StackMap locals:
      StackMap stack:
        20: iload 7 /* k */
            ifge 9
        end local 7 // int k
        end local 6 // org.bouncycastle.jce.provider.PKIXPolicyNode p_node
        end local 5 // org.bouncycastle.jce.provider.PKIXPolicyNode node
        21: .line 621
      StackMap locals:
      StackMap stack:
            aload 4 /* nodes_i */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 2
        22: .line 647
            aload 3 /* validPolicyTree */
            areturn
        end local 4 // java.util.Iterator nodes_i
        end local 3 // org.bouncycastle.jce.provider.PKIXPolicyNode validPolicyTree
        end local 2 // java.lang.String id_p
        end local 1 // java.util.List[] policyNodes
        end local 0 // int i
      LocalVariableTable:
        Start  End  Slot             Name  Signature
            0   23     0                i  I
            0   23     1      policyNodes  [Ljava/util/List;
            0   23     2             id_p  Ljava/lang/String;
            0   23     3  validPolicyTree  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            1   23     4          nodes_i  Ljava/util/Iterator;
            3   21     5             node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            5   21     6           p_node  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
            8   21     7                k  I
           10   19     8            nodes  Ljava/util/List;
           11   19     9                l  I
           13   17    10            node2  Lorg/bouncycastle/jce/provider/PKIXPolicyNode;
    MethodParameters:
                 Name  Flags
      i                
      policyNodes      
      id_p             
      validPolicyTree  

  protected static boolean isAnyPolicy(java.util.Set);
    descriptor: (Ljava/util/Set;)Z
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.util.Set policySet
         0: .line 653
            aload 0 /* policySet */
            ifnull 1
            aload 0 /* policySet */
            ldc "2.5.29.32.0"
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ifne 1
            aload 0 /* policySet */
            invokeinterface java.util.Set.isEmpty:()Z
            ifne 1
            iconst_0
            ireturn
      StackMap locals:
      StackMap stack:
         1: iconst_1
            ireturn
        end local 0 // java.util.Set policySet
      LocalVariableTable:
        Start  End  Slot       Name  Signature
            0    2     0  policySet  Ljava/util/Set;
    MethodParameters:
           Name  Flags
      policySet  

  protected static void addAdditionalStoreFromLocation(java.lang.String, org.bouncycastle.x509.ExtendedPKIXParameters);
    descriptor: (Ljava/lang/String;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=5, args_size=2
        start local 0 // java.lang.String location
        start local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
         0: .line 659
            aload 1 /* pkixParams */
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.isAdditionalLocationsEnabled:()Z
            ifeq 32
         1: .line 663
            aload 0 /* location */
            ldc "ldap://"
            invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
            ifeq 32
         2: .line 668
            aload 0 /* location */
            bipush 7
            invokevirtual java.lang.String.substring:(I)Ljava/lang/String;
            astore 0 /* location */
         3: .line 670
            aconst_null
            astore 2 /* base */
        start local 2 // java.lang.String base
         4: .line 671
            aconst_null
            astore 3 /* url */
        start local 3 // java.lang.String url
         5: .line 672
            aload 0 /* location */
            ldc "/"
            invokevirtual java.lang.String.indexOf:(Ljava/lang/String;)I
            iconst_m1
            if_icmpeq 11
         6: .line 674
            aload 0 /* location */
            aload 0 /* location */
            ldc "/"
            invokevirtual java.lang.String.indexOf:(Ljava/lang/String;)I
            invokevirtual java.lang.String.substring:(I)Ljava/lang/String;
            astore 2 /* base */
         7: .line 676
            new java.lang.StringBuilder
            dup
            ldc "ldap://"
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
         8: .line 677
            aload 0 /* location */
            iconst_0
            aload 0 /* location */
            ldc "/"
            invokevirtual java.lang.String.indexOf:(Ljava/lang/String;)I
            invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
         9: .line 676
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            astore 3 /* url */
        10: .line 678
            goto 12
        11: .line 681
      StackMap locals: java.lang.String java.lang.String
      StackMap stack:
            new java.lang.StringBuilder
            dup
            ldc "ldap://"
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* location */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            astore 3 /* url */
        12: .line 684
      StackMap locals:
      StackMap stack:
            new org.bouncycastle.jce.X509LDAPCertStoreParameters$Builder
            dup
        13: .line 685
            aload 3 /* url */
            aload 2 /* base */
        14: .line 684
            invokespecial org.bouncycastle.jce.X509LDAPCertStoreParameters$Builder.<init>:(Ljava/lang/String;Ljava/lang/String;)V
        15: .line 685
            invokevirtual org.bouncycastle.jce.X509LDAPCertStoreParameters$Builder.build:()Lorg/bouncycastle/jce/X509LDAPCertStoreParameters;
        16: .line 684
            astore 4 /* params */
        start local 4 // org.bouncycastle.jce.X509LDAPCertStoreParameters params
        17: .line 686
            aload 1 /* pkixParams */
        18: .line 687
            ldc "CERTIFICATE/LDAP"
            aload 4 /* params */
            getstatic org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME:Ljava/lang/String;
        19: .line 686
            invokestatic org.bouncycastle.x509.X509Store.getInstance:(Ljava/lang/String;Lorg/bouncycastle/x509/X509StoreParameters;Ljava/lang/String;)Lorg/bouncycastle/x509/X509Store;
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.addAdditionalStore:(Lorg/bouncycastle/util/Store;)V
        20: .line 688
            aload 1 /* pkixParams */
        21: .line 689
            ldc "CRL/LDAP"
            aload 4 /* params */
            getstatic org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME:Ljava/lang/String;
        22: .line 688
            invokestatic org.bouncycastle.x509.X509Store.getInstance:(Ljava/lang/String;Lorg/bouncycastle/x509/X509StoreParameters;Ljava/lang/String;)Lorg/bouncycastle/x509/X509Store;
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.addAdditionalStore:(Lorg/bouncycastle/util/Store;)V
        23: .line 690
            aload 1 /* pkixParams */
        24: .line 691
            ldc "ATTRIBUTECERTIFICATE/LDAP"
            aload 4 /* params */
            getstatic org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME:Ljava/lang/String;
        25: .line 690
            invokestatic org.bouncycastle.x509.X509Store.getInstance:(Ljava/lang/String;Lorg/bouncycastle/x509/X509StoreParameters;Ljava/lang/String;)Lorg/bouncycastle/x509/X509Store;
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.addAdditionalStore:(Lorg/bouncycastle/util/Store;)V
        26: .line 692
            aload 1 /* pkixParams */
        27: .line 693
            ldc "CERTIFICATEPAIR/LDAP"
            aload 4 /* params */
            getstatic org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME:Ljava/lang/String;
        28: .line 692
            invokestatic org.bouncycastle.x509.X509Store.getInstance:(Ljava/lang/String;Lorg/bouncycastle/x509/X509StoreParameters;Ljava/lang/String;)Lorg/bouncycastle/x509/X509Store;
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.addAdditionalStore:(Lorg/bouncycastle/util/Store;)V
        end local 4 // org.bouncycastle.jce.X509LDAPCertStoreParameters params
        end local 3 // java.lang.String url
        end local 2 // java.lang.String base
        29: .line 695
            goto 32
        30: .line 696
      StackMap locals: java.lang.String org.bouncycastle.x509.ExtendedPKIXParameters
      StackMap stack: java.lang.Exception
            pop
        31: .line 699
            new java.lang.RuntimeException
            dup
            ldc "Exception adding X.509 stores."
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;)V
            athrow
        32: .line 702
      StackMap locals:
      StackMap stack:
            return
        end local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
        end local 0 // java.lang.String location
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   33     0    location  Ljava/lang/String;
            0   33     1  pkixParams  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            4   29     2        base  Ljava/lang/String;
            5   29     3         url  Ljava/lang/String;
           17   29     4      params  Lorg/bouncycastle/jce/X509LDAPCertStoreParameters;
      Exception table:
        from    to  target  type
           1    29      30  Class java.lang.Exception
    MethodParameters:
            Name  Flags
      location    
      pkixParams  

  protected static java.util.Collection findCertificates(org.bouncycastle.x509.X509CertStoreSelector, java.util.List);
    descriptor: (Lorg/bouncycastle/x509/X509CertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=7, args_size=2
        start local 0 // org.bouncycastle.x509.X509CertStoreSelector certSelect
        start local 1 // java.util.List certStores
         0: .line 720
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 2 /* certs */
        start local 2 // java.util.Set certs
         1: .line 721
            aload 1 /* certStores */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 3 /* iter */
        start local 3 // java.util.Iterator iter
         2: .line 723
            goto 21
         3: .line 725
      StackMap locals: java.util.Set java.util.Iterator
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            astore 4 /* obj */
        start local 4 // java.lang.Object obj
         4: .line 727
            aload 4 /* obj */
            instanceof org.bouncycastle.x509.X509Store
            ifeq 13
         5: .line 729
            aload 4 /* obj */
            checkcast org.bouncycastle.x509.X509Store
            astore 5 /* certStore */
        start local 5 // org.bouncycastle.x509.X509Store certStore
         6: .line 732
            aload 2 /* certs */
            aload 5 /* certStore */
            aload 0 /* certSelect */
            invokevirtual org.bouncycastle.x509.X509Store.getMatches:(Lorg/bouncycastle/util/Selector;)Ljava/util/Collection;
            invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
            pop
         7: .line 733
            goto 21
         8: .line 734
      StackMap locals: org.bouncycastle.x509.X509CertStoreSelector java.util.List java.util.Set java.util.Iterator java.lang.Object org.bouncycastle.x509.X509Store
      StackMap stack: org.bouncycastle.util.StoreException
            astore 6 /* e */
        start local 6 // org.bouncycastle.util.StoreException e
         9: .line 738
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        10: .line 739
            ldc "Problem while picking certificates from X.509 store."
            aload 6 /* e */
        11: .line 738
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        12: .line 736
            athrow
        end local 6 // org.bouncycastle.util.StoreException e
        end local 5 // org.bouncycastle.x509.X509Store certStore
        13: .line 744
      StackMap locals:
      StackMap stack:
            aload 4 /* obj */
            checkcast java.security.cert.CertStore
            astore 5 /* certStore */
        start local 5 // java.security.cert.CertStore certStore
        14: .line 748
            aload 2 /* certs */
            aload 5 /* certStore */
            aload 0 /* certSelect */
            invokevirtual java.security.cert.CertStore.getCertificates:(Ljava/security/cert/CertSelector;)Ljava/util/Collection;
            invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
            pop
        15: .line 749
            goto 21
        16: .line 750
      StackMap locals: org.bouncycastle.x509.X509CertStoreSelector java.util.List java.util.Set java.util.Iterator java.lang.Object java.security.cert.CertStore
      StackMap stack: java.security.cert.CertStoreException
            astore 6 /* e */
        start local 6 // java.security.cert.CertStoreException e
        17: .line 752
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        18: .line 753
            ldc "Problem while picking certificates from certificate store."
        19: .line 754
            aload 6 /* e */
        20: .line 752
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.security.cert.CertStoreException e
        end local 5 // java.security.cert.CertStore certStore
        end local 4 // java.lang.Object obj
        21: .line 723
      StackMap locals:
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 3
        22: .line 758
            aload 2 /* certs */
            areturn
        end local 3 // java.util.Iterator iter
        end local 2 // java.util.Set certs
        end local 1 // java.util.List certStores
        end local 0 // org.bouncycastle.x509.X509CertStoreSelector certSelect
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   23     0  certSelect  Lorg/bouncycastle/x509/X509CertStoreSelector;
            0   23     1  certStores  Ljava/util/List;
            1   23     2       certs  Ljava/util/Set;
            2   23     3        iter  Ljava/util/Iterator;
            4   21     4         obj  Ljava/lang/Object;
            6   13     5   certStore  Lorg/bouncycastle/x509/X509Store;
            9   13     6           e  Lorg/bouncycastle/util/StoreException;
           14   21     5   certStore  Ljava/security/cert/CertStore;
           17   21     6           e  Ljava/security/cert/CertStoreException;
      Exception table:
        from    to  target  type
           6     7       8  Class org.bouncycastle.util.StoreException
          14    15      16  Class java.security.cert.CertStoreException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      certSelect  
      certStores  

  protected static java.util.Collection findCertificates(org.bouncycastle.x509.X509AttributeCertStoreSelector, java.util.List);
    descriptor: (Lorg/bouncycastle/x509/X509AttributeCertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=7, args_size=2
        start local 0 // org.bouncycastle.x509.X509AttributeCertStoreSelector certSelect
        start local 1 // java.util.List certStores
         0: .line 765
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 2 /* certs */
        start local 2 // java.util.Set certs
         1: .line 766
            aload 1 /* certStores */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 3 /* iter */
        start local 3 // java.util.Iterator iter
         2: .line 768
            goto 13
         3: .line 770
      StackMap locals: java.util.Set java.util.Iterator
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            astore 4 /* obj */
        start local 4 // java.lang.Object obj
         4: .line 772
            aload 4 /* obj */
            instanceof org.bouncycastle.x509.X509Store
            ifeq 13
         5: .line 774
            aload 4 /* obj */
            checkcast org.bouncycastle.x509.X509Store
            astore 5 /* certStore */
        start local 5 // org.bouncycastle.x509.X509Store certStore
         6: .line 777
            aload 2 /* certs */
            aload 5 /* certStore */
            aload 0 /* certSelect */
            invokevirtual org.bouncycastle.x509.X509Store.getMatches:(Lorg/bouncycastle/util/Selector;)Ljava/util/Collection;
            invokeinterface java.util.Set.addAll:(Ljava/util/Collection;)Z
            pop
         7: .line 778
            goto 13
         8: .line 779
      StackMap locals: org.bouncycastle.x509.X509AttributeCertStoreSelector java.util.List java.util.Set java.util.Iterator java.lang.Object org.bouncycastle.x509.X509Store
      StackMap stack: org.bouncycastle.util.StoreException
            astore 6 /* e */
        start local 6 // org.bouncycastle.util.StoreException e
         9: .line 783
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        10: .line 784
            ldc "Problem while picking certificates from X.509 store."
            aload 6 /* e */
        11: .line 783
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        12: .line 781
            athrow
        end local 6 // org.bouncycastle.util.StoreException e
        end local 5 // org.bouncycastle.x509.X509Store certStore
        end local 4 // java.lang.Object obj
        13: .line 768
      StackMap locals:
      StackMap stack:
            aload 3 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 3
        14: .line 788
            aload 2 /* certs */
            areturn
        end local 3 // java.util.Iterator iter
        end local 2 // java.util.Set certs
        end local 1 // java.util.List certStores
        end local 0 // org.bouncycastle.x509.X509AttributeCertStoreSelector certSelect
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   15     0  certSelect  Lorg/bouncycastle/x509/X509AttributeCertStoreSelector;
            0   15     1  certStores  Ljava/util/List;
            1   15     2       certs  Ljava/util/Set;
            2   15     3        iter  Ljava/util/Iterator;
            4   13     4         obj  Ljava/lang/Object;
            6   13     5   certStore  Lorg/bouncycastle/x509/X509Store;
            9   13     6           e  Lorg/bouncycastle/util/StoreException;
      Exception table:
        from    to  target  type
           6     7       8  Class org.bouncycastle.util.StoreException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      certSelect  
      certStores  

  protected static void addAdditionalStoresFromCRLDistributionPoint(org.bouncycastle.asn1.x509.CRLDistPoint, org.bouncycastle.x509.ExtendedPKIXParameters);
    descriptor: (Lorg/bouncycastle/asn1/x509/CRLDistPoint;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=8, args_size=2
        start local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
        start local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
         0: .line 795
            aload 0 /* crldp */
            ifnull 31
         1: .line 797
            aconst_null
            astore 2 /* dps */
        start local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
         2: .line 800
            aload 0 /* crldp */
            invokevirtual org.bouncycastle.asn1.x509.CRLDistPoint.getDistributionPoints:()[Lorg/bouncycastle/asn1/x509/DistributionPoint;
            astore 2 /* dps */
         3: .line 801
            goto 8
         4: .line 802
      StackMap locals: org.bouncycastle.asn1.x509.CRLDistPoint org.bouncycastle.x509.ExtendedPKIXParameters org.bouncycastle.asn1.x509.DistributionPoint[]
      StackMap stack: java.lang.Exception
            astore 3 /* e */
        start local 3 // java.lang.Exception e
         5: .line 804
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
         6: .line 805
            ldc "Distribution points could not be read."
            aload 3 /* e */
         7: .line 804
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 3 // java.lang.Exception e
         8: .line 807
      StackMap locals:
      StackMap stack:
            iconst_0
            istore 3 /* i */
        start local 3 // int i
         9: goto 30
        10: .line 809
      StackMap locals: int
      StackMap stack:
            aload 2 /* dps */
            iload 3 /* i */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            astore 4 /* dpn */
        start local 4 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        11: .line 811
            aload 4 /* dpn */
            ifnull 29
        12: .line 813
            aload 4 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getType:()I
            ifne 29
        13: .line 816
            aload 4 /* dpn */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPointName.getName:()Lorg/bouncycastle/asn1/ASN1Encodable;
        14: .line 815
            invokestatic org.bouncycastle.asn1.x509.GeneralNames.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/x509/GeneralNames;
        15: .line 816
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
        16: .line 815
            astore 5 /* genNames */
        start local 5 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        17: .line 818
            iconst_0
            istore 6 /* j */
        start local 6 // int j
        18: goto 28
        19: .line 820
      StackMap locals: org.bouncycastle.asn1.x509.DistributionPointName org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 5 /* genNames */
            iload 6 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getTagNo:()I
            bipush 6
            if_icmpne 27
        20: .line 823
            aload 5 /* genNames */
            iload 6 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getName:()Lorg/bouncycastle/asn1/DEREncodable;
        21: .line 822
            invokestatic org.bouncycastle.asn1.DERIA5String.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/DERIA5String;
        22: .line 823
            invokevirtual org.bouncycastle.asn1.DERIA5String.getString:()Ljava/lang/String;
        23: .line 822
            astore 7 /* location */
        start local 7 // java.lang.String location
        24: .line 825
            aload 7 /* location */
        25: .line 826
            aload 1 /* pkixParams */
        26: .line 825
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.addAdditionalStoreFromLocation:(Ljava/lang/String;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
        end local 7 // java.lang.String location
        27: .line 818
      StackMap locals:
      StackMap stack:
            iinc 6 /* j */ 1
      StackMap locals:
      StackMap stack:
        28: iload 6 /* j */
            aload 5 /* genNames */
            arraylength
            if_icmplt 19
        end local 6 // int j
        end local 5 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        end local 4 // org.bouncycastle.asn1.x509.DistributionPointName dpn
        29: .line 807
      StackMap locals:
      StackMap stack:
            iinc 3 /* i */ 1
      StackMap locals:
      StackMap stack:
        30: iload 3 /* i */
            aload 2 /* dps */
            arraylength
            if_icmplt 10
        end local 3 // int i
        end local 2 // org.bouncycastle.asn1.x509.DistributionPoint[] dps
        31: .line 833
      StackMap locals:
      StackMap stack:
            return
        end local 1 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
        end local 0 // org.bouncycastle.asn1.x509.CRLDistPoint crldp
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   32     0       crldp  Lorg/bouncycastle/asn1/x509/CRLDistPoint;
            0   32     1  pkixParams  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            2   31     2         dps  [Lorg/bouncycastle/asn1/x509/DistributionPoint;
            5    8     3           e  Ljava/lang/Exception;
            9   31     3           i  I
           11   29     4         dpn  Lorg/bouncycastle/asn1/x509/DistributionPointName;
           17   29     5    genNames  [Lorg/bouncycastle/asn1/x509/GeneralName;
           18   29     6           j  I
           24   27     7    location  Ljava/lang/String;
      Exception table:
        from    to  target  type
           2     3       4  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      crldp       
      pkixParams  

  protected static void getCRLIssuersFromDistributionPoint(org.bouncycastle.asn1.x509.DistributionPoint, java.util.Collection, java.security.cert.X509CRLSelector, org.bouncycastle.x509.ExtendedPKIXParameters);
    descriptor: (Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/util/Collection;Ljava/security/cert/X509CRLSelector;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=8, args_size=4
        start local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
        start local 1 // java.util.Collection issuerPrincipals
        start local 2 // java.security.cert.X509CRLSelector selector
        start local 3 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
         0: .line 861
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 4 /* issuers */
        start local 4 // java.util.List issuers
         1: .line 863
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getCRLIssuer:()Lorg/bouncycastle/asn1/x509/GeneralNames;
            ifnull 18
         2: .line 865
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getCRLIssuer:()Lorg/bouncycastle/asn1/x509/GeneralNames;
            invokevirtual org.bouncycastle.asn1.x509.GeneralNames.getNames:()[Lorg/bouncycastle/asn1/x509/GeneralName;
            astore 5 /* genNames */
        start local 5 // org.bouncycastle.asn1.x509.GeneralName[] genNames
         3: .line 867
            iconst_0
            istore 6 /* j */
        start local 6 // int j
         4: goto 16
         5: .line 869
      StackMap locals: java.util.List org.bouncycastle.asn1.x509.GeneralName[] int
      StackMap stack:
            aload 5 /* genNames */
            iload 6 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getTagNo:()I
            iconst_4
            if_icmpne 15
         6: .line 873
            aload 4 /* issuers */
            new javax.security.auth.x500.X500Principal
            dup
            aload 5 /* genNames */
            iload 6 /* j */
            aaload
            invokevirtual org.bouncycastle.asn1.x509.GeneralName.getName:()Lorg/bouncycastle/asn1/DEREncodable;
         7: .line 874
            invokeinterface org.bouncycastle.asn1.DEREncodable.getDERObject:()Lorg/bouncycastle/asn1/DERObject;
            invokevirtual org.bouncycastle.asn1.DERObject.getEncoded:()[B
            invokespecial javax.security.auth.x500.X500Principal.<init>:([B)V
         8: .line 873
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
         9: .line 875
            goto 15
        10: .line 876
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 7 /* e */
        start local 7 // java.io.IOException e
        11: .line 878
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        12: .line 879
            ldc "CRL issuer information from distribution point cannot be decoded."
        13: .line 880
            aload 7 /* e */
        14: .line 878
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 7 // java.io.IOException e
        15: .line 867
      StackMap locals:
      StackMap stack:
            iinc 6 /* j */ 1
      StackMap locals:
      StackMap stack:
        16: iload 6 /* j */
            aload 5 /* genNames */
            arraylength
            if_icmplt 5
        end local 6 // int j
        end local 5 // org.bouncycastle.asn1.x509.GeneralName[] genNames
        17: .line 884
            goto 26
        18: .line 891
      StackMap locals:
      StackMap stack:
            aload 0 /* dp */
            invokevirtual org.bouncycastle.asn1.x509.DistributionPoint.getDistributionPoint:()Lorg/bouncycastle/asn1/x509/DistributionPointName;
            ifnonnull 22
        19: .line 893
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        20: .line 894
            ldc "CRL issuer is omitted from distribution point but no distributionPoint field present."
        21: .line 893
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        22: .line 897
      StackMap locals:
      StackMap stack:
            aload 1 /* issuerPrincipals */
            invokeinterface java.util.Collection.iterator:()Ljava/util/Iterator;
            astore 5 /* it */
        start local 5 // java.util.Iterator it
        23: goto 25
        24: .line 899
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 4 /* issuers */
            aload 5 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast javax.security.auth.x500.X500Principal
            invokeinterface java.util.List.add:(Ljava/lang/Object;)Z
            pop
        25: .line 897
      StackMap locals:
      StackMap stack:
            aload 5 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 24
        end local 5 // java.util.Iterator it
        26: .line 946
      StackMap locals:
      StackMap stack:
            aload 4 /* issuers */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 5 /* it */
        start local 5 // java.util.Iterator it
        27: .line 947
            goto 34
        28: .line 951
      StackMap locals: java.util.Iterator
      StackMap stack:
            aload 2 /* selector */
            aload 5 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast javax.security.auth.x500.X500Principal
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokevirtual java.security.cert.X509CRLSelector.addIssuerName:([B)V
        29: .line 952
            goto 34
        30: .line 953
      StackMap locals:
      StackMap stack: java.io.IOException
            astore 6 /* ex */
        start local 6 // java.io.IOException ex
        31: .line 955
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        32: .line 956
            ldc "Cannot decode CRL issuer information."
            aload 6 /* ex */
        33: .line 955
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.io.IOException ex
        34: .line 947
      StackMap locals:
      StackMap stack:
            aload 5 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 28
        35: .line 959
            return
        end local 5 // java.util.Iterator it
        end local 4 // java.util.List issuers
        end local 3 // org.bouncycastle.x509.ExtendedPKIXParameters pkixParams
        end local 2 // java.security.cert.X509CRLSelector selector
        end local 1 // java.util.Collection issuerPrincipals
        end local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
      LocalVariableTable:
        Start  End  Slot              Name  Signature
            0   36     0                dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
            0   36     1  issuerPrincipals  Ljava/util/Collection;
            0   36     2          selector  Ljava/security/cert/X509CRLSelector;
            0   36     3        pkixParams  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            1   36     4           issuers  Ljava/util/List;
            3   17     5          genNames  [Lorg/bouncycastle/asn1/x509/GeneralName;
            4   17     6                 j  I
           11   15     7                 e  Ljava/io/IOException;
           23   26     5                it  Ljava/util/Iterator;
           27   36     5                it  Ljava/util/Iterator;
           31   34     6                ex  Ljava/io/IOException;
      Exception table:
        from    to  target  type
           6     9      10  Class java.io.IOException
          28    29      30  Class java.io.IOException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
                  Name  Flags
      dp                
      issuerPrincipals  
      selector          
      pkixParams        

  private static java.math.BigInteger getSerialNumber(java.lang.Object);
    descriptor: (Ljava/lang/Object;)Ljava/math/BigInteger;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // java.lang.Object cert
         0: .line 964
            aload 0 /* cert */
            instanceof java.security.cert.X509Certificate
            ifeq 2
         1: .line 966
            aload 0 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual java.security.cert.X509Certificate.getSerialNumber:()Ljava/math/BigInteger;
            areturn
         2: .line 970
      StackMap locals:
      StackMap stack:
            aload 0 /* cert */
            checkcast org.bouncycastle.x509.X509AttributeCertificate
            invokeinterface org.bouncycastle.x509.X509AttributeCertificate.getSerialNumber:()Ljava/math/BigInteger;
            areturn
        end local 0 // java.lang.Object cert
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    3     0  cert  Ljava/lang/Object;
    MethodParameters:
      Name  Flags
      cert  

  protected static void getCertStatus(java.util.Date, java.security.cert.X509CRL, java.lang.Object, org.bouncycastle.jce.provider.CertStatus);
    descriptor: (Ljava/util/Date;Ljava/security/cert/X509CRL;Ljava/lang/Object;Lorg/bouncycastle/jce/provider/CertStatus;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=8, args_size=4
        start local 0 // java.util.Date validDate
        start local 1 // java.security.cert.X509CRL crl
        start local 2 // java.lang.Object cert
        start local 3 // org.bouncycastle.jce.provider.CertStatus certStatus
         0: .line 982
            aconst_null
            astore 4 /* bcCRL */
        start local 4 // org.bouncycastle.jce.provider.X509CRLObject bcCRL
         1: .line 985
            new org.bouncycastle.jce.provider.X509CRLObject
            dup
            new org.bouncycastle.asn1.x509.CertificateList
            dup
            aload 1 /* crl */
            invokevirtual java.security.cert.X509CRL.getEncoded:()[B
            invokestatic org.bouncycastle.asn1.ASN1Sequence.fromByteArray:([B)Lorg/bouncycastle/asn1/ASN1Object;
            checkcast org.bouncycastle.asn1.ASN1Sequence
            invokespecial org.bouncycastle.asn1.x509.CertificateList.<init>:(Lorg/bouncycastle/asn1/ASN1Sequence;)V
            invokespecial org.bouncycastle.jce.provider.X509CRLObject.<init>:(Lorg/bouncycastle/asn1/x509/CertificateList;)V
            astore 4 /* bcCRL */
         2: .line 986
            goto 5
         3: .line 987
      StackMap locals: java.util.Date java.security.cert.X509CRL java.lang.Object org.bouncycastle.jce.provider.CertStatus org.bouncycastle.jce.provider.X509CRLObject
      StackMap stack: java.lang.Exception
            astore 5 /* exception */
        start local 5 // java.lang.Exception exception
         4: .line 989
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "Bouncy Castle X509CRLObject could not be created."
            aload 5 /* exception */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // java.lang.Exception exception
         5: .line 993
      StackMap locals:
      StackMap stack:
            aload 4 /* bcCRL */
            aload 2 /* cert */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getSerialNumber:(Ljava/lang/Object;)Ljava/math/BigInteger;
            invokevirtual org.bouncycastle.jce.provider.X509CRLObject.getRevokedCertificate:(Ljava/math/BigInteger;)Ljava/security/cert/X509CRLEntry;
            checkcast org.bouncycastle.jce.provider.X509CRLEntryObject
            astore 5 /* crl_entry */
        start local 5 // org.bouncycastle.jce.provider.X509CRLEntryObject crl_entry
         6: .line 994
            aload 5 /* crl_entry */
            ifnull 33
         7: .line 995
            aload 2 /* cert */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getEncodedIssuerPrincipal:(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;
            aload 5 /* crl_entry */
            invokevirtual org.bouncycastle.jce.provider.X509CRLEntryObject.getCertificateIssuer:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifne 9
            aload 2 /* cert */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getEncodedIssuerPrincipal:(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;
         8: .line 996
            aload 1 /* crl */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getIssuerPrincipal:(Ljava/security/cert/X509CRL;)Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifeq 33
         9: .line 998
      StackMap locals: org.bouncycastle.jce.provider.X509CRLEntryObject
      StackMap stack:
            aconst_null
            astore 6 /* reasonCode */
        start local 6 // org.bouncycastle.asn1.DEREnumerated reasonCode
        10: .line 999
            aload 5 /* crl_entry */
            invokevirtual org.bouncycastle.jce.provider.X509CRLEntryObject.hasExtensions:()Z
            ifeq 22
        11: .line 1005
            aload 5 /* crl_entry */
        12: .line 1006
            getstatic org.bouncycastle.asn1.x509.X509Extensions.ReasonCode:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
        13: .line 1005
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/bouncycastle/asn1/DERObject;
        14: .line 1004
            invokestatic org.bouncycastle.asn1.DEREnumerated.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/DEREnumerated;
        15: .line 1003
            astore 6 /* reasonCode */
        16: .line 1007
            goto 22
        17: .line 1008
      StackMap locals: java.util.Date java.security.cert.X509CRL java.lang.Object org.bouncycastle.jce.provider.CertStatus org.bouncycastle.jce.provider.X509CRLObject org.bouncycastle.jce.provider.X509CRLEntryObject org.bouncycastle.asn1.DEREnumerated
      StackMap stack: java.lang.Exception
            astore 7 /* e */
        start local 7 // java.lang.Exception e
        18: .line 1010
            new org.bouncycastle.jce.provider.AnnotatedException
        19: .line 1011
            ldc "Reason code CRL entry extension could not be decoded."
        20: .line 1012
            aload 7 /* e */
        21: .line 1010
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        end local 7 // java.lang.Exception e
        22: .line 1018
      StackMap locals:
      StackMap stack:
            aload 0 /* validDate */
            invokevirtual java.util.Date.getTime:()J
            aload 5 /* crl_entry */
            invokevirtual org.bouncycastle.jce.provider.X509CRLEntryObject.getRevocationDate:()Ljava/util/Date;
            invokevirtual java.util.Date.getTime:()J
            lcmp
            ifge 28
        23: .line 1019
            aload 6 /* reasonCode */
            ifnull 28
        24: .line 1020
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.DEREnumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            ifeq 28
        25: .line 1021
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.DEREnumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            iconst_1
            if_icmpeq 28
        26: .line 1022
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.DEREnumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            iconst_2
            if_icmpeq 28
        27: .line 1023
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.DEREnumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            bipush 8
            if_icmpne 33
        28: .line 1027
      StackMap locals:
      StackMap stack:
            aload 6 /* reasonCode */
            ifnull 31
        29: .line 1029
            aload 3 /* certStatus */
            aload 6 /* reasonCode */
            invokevirtual org.bouncycastle.asn1.DEREnumerated.getValue:()Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.intValue:()I
            invokevirtual org.bouncycastle.jce.provider.CertStatus.setCertStatus:(I)V
        30: .line 1030
            goto 32
        31: .line 1034
      StackMap locals:
      StackMap stack:
            aload 3 /* certStatus */
            iconst_0
            invokevirtual org.bouncycastle.jce.provider.CertStatus.setCertStatus:(I)V
        32: .line 1036
      StackMap locals:
      StackMap stack:
            aload 3 /* certStatus */
            aload 5 /* crl_entry */
            invokevirtual org.bouncycastle.jce.provider.X509CRLEntryObject.getRevocationDate:()Ljava/util/Date;
            invokevirtual org.bouncycastle.jce.provider.CertStatus.setRevocationDate:(Ljava/util/Date;)V
        end local 6 // org.bouncycastle.asn1.DEREnumerated reasonCode
        33: .line 1039
      StackMap locals:
      StackMap stack:
            return
        end local 5 // org.bouncycastle.jce.provider.X509CRLEntryObject crl_entry
        end local 4 // org.bouncycastle.jce.provider.X509CRLObject bcCRL
        end local 3 // org.bouncycastle.jce.provider.CertStatus certStatus
        end local 2 // java.lang.Object cert
        end local 1 // java.security.cert.X509CRL crl
        end local 0 // java.util.Date validDate
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   34     0   validDate  Ljava/util/Date;
            0   34     1         crl  Ljava/security/cert/X509CRL;
            0   34     2        cert  Ljava/lang/Object;
            0   34     3  certStatus  Lorg/bouncycastle/jce/provider/CertStatus;
            1   34     4       bcCRL  Lorg/bouncycastle/jce/provider/X509CRLObject;
            4    5     5   exception  Ljava/lang/Exception;
            6   34     5   crl_entry  Lorg/bouncycastle/jce/provider/X509CRLEntryObject;
           10   33     6  reasonCode  Lorg/bouncycastle/asn1/DEREnumerated;
           18   22     7           e  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
           1     2       3  Class java.lang.Exception
          11    16      17  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      validDate   
      crl         
      cert        
      certStatus  

  protected static java.util.Set getDeltaCRLs(java.util.Date, org.bouncycastle.x509.ExtendedPKIXParameters, java.security.cert.X509CRL);
    descriptor: (Ljava/util/Date;Lorg/bouncycastle/x509/ExtendedPKIXParameters;Ljava/security/cert/X509CRL;)Ljava/util/Set;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=10, args_size=3
        start local 0 // java.util.Date currentDate
        start local 1 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
        start local 2 // java.security.cert.X509CRL completeCRL
         0: .line 1056
            new org.bouncycastle.x509.X509CRLStoreSelector
            dup
            invokespecial org.bouncycastle.x509.X509CRLStoreSelector.<init>:()V
            astore 3 /* deltaSelect */
        start local 3 // org.bouncycastle.x509.X509CRLStoreSelector deltaSelect
         1: .line 1061
            aload 3 /* deltaSelect */
         2: .line 1062
            aload 2 /* completeCRL */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getIssuerPrincipal:(Ljava/security/cert/X509CRL;)Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
         3: .line 1061
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.addIssuerName:([B)V
         4: .line 1063
            goto 7
         5: .line 1064
      StackMap locals: java.util.Date org.bouncycastle.x509.ExtendedPKIXParameters java.security.cert.X509CRL org.bouncycastle.x509.X509CRLStoreSelector
      StackMap stack: java.io.IOException
            astore 4 /* e */
        start local 4 // java.io.IOException e
         6: .line 1066
            new org.bouncycastle.jce.provider.AnnotatedException
            ldc "Cannot extract issuer from CRL."
            aload 4 /* e */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        end local 4 // java.io.IOException e
         7: .line 1069
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 4 /* completeCRLNumber */
        start local 4 // java.math.BigInteger completeCRLNumber
         8: .line 1072
            aload 2 /* completeCRL */
         9: .line 1073
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_NUMBER:Ljava/lang/String;
        10: .line 1072
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getExtensionValue:(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/bouncycastle/asn1/DERObject;
            astore 5 /* derObject */
        start local 5 // org.bouncycastle.asn1.DERObject derObject
        11: .line 1074
            aload 5 /* derObject */
            ifnull 18
        12: .line 1076
            aload 5 /* derObject */
            invokestatic org.bouncycastle.asn1.x509.CRLNumber.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/DERInteger;
            invokevirtual org.bouncycastle.asn1.DERInteger.getPositiveValue:()Ljava/math/BigInteger;
            astore 4 /* completeCRLNumber */
        end local 5 // org.bouncycastle.asn1.DERObject derObject
        13: .line 1078
            goto 18
        14: .line 1079
      StackMap locals: java.util.Date org.bouncycastle.x509.ExtendedPKIXParameters java.security.cert.X509CRL org.bouncycastle.x509.X509CRLStoreSelector java.math.BigInteger
      StackMap stack: java.lang.Exception
            astore 5 /* e */
        start local 5 // java.lang.Exception e
        15: .line 1081
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        16: .line 1082
            ldc "CRL number extension could not be extracted from CRL."
            aload 5 /* e */
        17: .line 1081
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // java.lang.Exception e
        18: .line 1086
      StackMap locals:
      StackMap stack:
            aconst_null
            astore 5 /* idp */
        start local 5 // byte[] idp
        19: .line 1089
            aload 2 /* completeCRL */
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;
            invokevirtual java.security.cert.X509CRL.getExtensionValue:(Ljava/lang/String;)[B
            astore 5 /* idp */
        20: .line 1090
            goto 26
        21: .line 1091
      StackMap locals: java.util.Date org.bouncycastle.x509.ExtendedPKIXParameters java.security.cert.X509CRL org.bouncycastle.x509.X509CRLStoreSelector java.math.BigInteger byte[]
      StackMap stack: java.lang.Exception
            astore 6 /* e */
        start local 6 // java.lang.Exception e
        22: .line 1093
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        23: .line 1094
            ldc "Issuing distribution point extension value could not be read."
        24: .line 1095
            aload 6 /* e */
        25: .line 1093
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 6 // java.lang.Exception e
        26: .line 1100
      StackMap locals:
      StackMap stack:
            aload 3 /* deltaSelect */
            aload 4 /* completeCRLNumber */
            ifnonnull 27
            aconst_null
            goto 29
      StackMap locals:
      StackMap stack: org.bouncycastle.x509.X509CRLStoreSelector
        27: aload 4 /* completeCRLNumber */
        28: .line 1101
            lconst_1
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
        29: .line 1100
      StackMap locals: java.util.Date org.bouncycastle.x509.ExtendedPKIXParameters java.security.cert.X509CRL org.bouncycastle.x509.X509CRLStoreSelector java.math.BigInteger byte[]
      StackMap stack: org.bouncycastle.x509.X509CRLStoreSelector java.math.BigInteger
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setMinCRLNumber:(Ljava/math/BigInteger;)V
        30: .line 1103
            aload 3 /* deltaSelect */
            aload 5 /* idp */
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setIssuingDistributionPoint:([B)V
        31: .line 1104
            aload 3 /* deltaSelect */
            iconst_1
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setIssuingDistributionPointEnabled:(Z)V
        32: .line 1107
            aload 3 /* deltaSelect */
            aload 4 /* completeCRLNumber */
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setMaxBaseCRLNumber:(Ljava/math/BigInteger;)V
        33: .line 1110
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_UTIL:Lorg/bouncycastle/jce/provider/PKIXCRLUtil;
            aload 3 /* deltaSelect */
            aload 1 /* paramsPKIX */
            aload 0 /* currentDate */
            invokevirtual org.bouncycastle.jce.provider.PKIXCRLUtil.findCRLs:(Lorg/bouncycastle/x509/X509CRLStoreSelector;Lorg/bouncycastle/x509/ExtendedPKIXParameters;Ljava/util/Date;)Ljava/util/Set;
            astore 6 /* temp */
        start local 6 // java.util.Set temp
        34: .line 1112
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 7 /* result */
        start local 7 // java.util.Set result
        35: .line 1114
            aload 6 /* temp */
            invokeinterface java.util.Set.iterator:()Ljava/util/Iterator;
            astore 8 /* it */
        start local 8 // java.util.Iterator it
        36: goto 40
        37: .line 1116
      StackMap locals: java.util.Set java.util.Set java.util.Iterator
      StackMap stack:
            aload 8 /* it */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 9 /* crl */
        start local 9 // java.security.cert.X509CRL crl
        38: .line 1118
            aload 9 /* crl */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.isDeltaCRL:(Ljava/security/cert/X509CRL;)Z
            ifeq 40
        39: .line 1120
            aload 7 /* result */
            aload 9 /* crl */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        end local 9 // java.security.cert.X509CRL crl
        40: .line 1114
      StackMap locals:
      StackMap stack:
            aload 8 /* it */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 37
        end local 8 // java.util.Iterator it
        41: .line 1124
            aload 7 /* result */
            areturn
        end local 7 // java.util.Set result
        end local 6 // java.util.Set temp
        end local 5 // byte[] idp
        end local 4 // java.math.BigInteger completeCRLNumber
        end local 3 // org.bouncycastle.x509.X509CRLStoreSelector deltaSelect
        end local 2 // java.security.cert.X509CRL completeCRL
        end local 1 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
        end local 0 // java.util.Date currentDate
      LocalVariableTable:
        Start  End  Slot               Name  Signature
            0   42     0        currentDate  Ljava/util/Date;
            0   42     1         paramsPKIX  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            0   42     2        completeCRL  Ljava/security/cert/X509CRL;
            1   42     3        deltaSelect  Lorg/bouncycastle/x509/X509CRLStoreSelector;
            6    7     4                  e  Ljava/io/IOException;
            8   42     4  completeCRLNumber  Ljava/math/BigInteger;
           11   13     5          derObject  Lorg/bouncycastle/asn1/DERObject;
           15   18     5                  e  Ljava/lang/Exception;
           19   42     5                idp  [B
           22   26     6                  e  Ljava/lang/Exception;
           34   42     6               temp  Ljava/util/Set;
           35   42     7             result  Ljava/util/Set;
           36   41     8                 it  Ljava/util/Iterator;
           38   40     9                crl  Ljava/security/cert/X509CRL;
      Exception table:
        from    to  target  type
           1     4       5  Class java.io.IOException
           8    13      14  Class java.lang.Exception
          19    20      21  Class java.lang.Exception
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
             Name  Flags
      currentDate  
      paramsPKIX   
      completeCRL  

  private static boolean isDeltaCRL(java.security.cert.X509CRL);
    descriptor: (Ljava/security/cert/X509CRL;)Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=2, args_size=1
        start local 0 // java.security.cert.X509CRL crl
         0: .line 1129
            aload 0 /* crl */
            invokevirtual java.security.cert.X509CRL.getCriticalExtensionOIDs:()Ljava/util/Set;
            astore 1 /* critical */
        start local 1 // java.util.Set critical
         1: .line 1131
            aload 1 /* critical */
            getstatic org.bouncycastle.jce.provider.RFC3280CertPathUtilities.DELTA_CRL_INDICATOR:Ljava/lang/String;
            invokeinterface java.util.Set.contains:(Ljava/lang/Object;)Z
            ireturn
        end local 1 // java.util.Set critical
        end local 0 // java.security.cert.X509CRL crl
      LocalVariableTable:
        Start  End  Slot      Name  Signature
            0    2     0       crl  Ljava/security/cert/X509CRL;
            1    2     1  critical  Ljava/util/Set;
    MethodParameters:
      Name  Flags
      crl   

  protected static java.util.Set getCompleteCRLs(org.bouncycastle.asn1.x509.DistributionPoint, java.lang.Object, java.util.Date, org.bouncycastle.x509.ExtendedPKIXParameters);
    descriptor: (Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/lang/Object;Ljava/util/Date;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)Ljava/util/Set;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=5, locals=7, args_size=4
        start local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
        start local 1 // java.lang.Object cert
        start local 2 // java.util.Date currentDate
        start local 3 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
         0: .line 1152
            new org.bouncycastle.x509.X509CRLStoreSelector
            dup
            invokespecial org.bouncycastle.x509.X509CRLStoreSelector.<init>:()V
            astore 4 /* crlselect */
        start local 4 // org.bouncycastle.x509.X509CRLStoreSelector crlselect
         1: .line 1155
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 5 /* issuers */
        start local 5 // java.util.Set issuers
         2: .line 1156
            aload 1 /* cert */
            instanceof org.bouncycastle.x509.X509AttributeCertificate
            ifeq 7
         3: .line 1158
            aload 5 /* issuers */
            aload 1 /* cert */
            checkcast org.bouncycastle.x509.X509AttributeCertificate
         4: .line 1159
            invokeinterface org.bouncycastle.x509.X509AttributeCertificate.getIssuer:()Lorg/bouncycastle/x509/AttributeCertificateIssuer;
            invokevirtual org.bouncycastle.x509.AttributeCertificateIssuer.getPrincipals:()[Ljava/security/Principal;
            iconst_0
            aaload
         5: .line 1158
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         6: .line 1160
            goto 8
         7: .line 1163
      StackMap locals: org.bouncycastle.x509.X509CRLStoreSelector java.util.Set
      StackMap stack:
            aload 5 /* issuers */
            aload 1 /* cert */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getEncodedIssuerPrincipal:(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
         8: .line 1165
      StackMap locals:
      StackMap stack:
            aload 0 /* dp */
            aload 5 /* issuers */
            aload 4 /* crlselect */
            aload 3 /* paramsPKIX */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getCRLIssuersFromDistributionPoint:(Lorg/bouncycastle/asn1/x509/DistributionPoint;Ljava/util/Collection;Ljava/security/cert/X509CRLSelector;Lorg/bouncycastle/x509/ExtendedPKIXParameters;)V
        end local 5 // java.util.Set issuers
         9: .line 1166
            goto 14
        10: .line 1167
      StackMap locals: org.bouncycastle.asn1.x509.DistributionPoint java.lang.Object java.util.Date org.bouncycastle.x509.ExtendedPKIXParameters org.bouncycastle.x509.X509CRLStoreSelector
      StackMap stack: org.bouncycastle.jce.provider.AnnotatedException
            astore 5 /* e */
        start local 5 // org.bouncycastle.jce.provider.AnnotatedException e
        11: .line 1169
            new org.bouncycastle.jce.provider.AnnotatedException
        12: .line 1170
            ldc "Could not get issuer information from distribution point."
            aload 5 /* e */
        13: .line 1169
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
        end local 5 // org.bouncycastle.jce.provider.AnnotatedException e
        14: .line 1172
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            instanceof java.security.cert.X509Certificate
            ifeq 17
        15: .line 1174
            aload 4 /* crlselect */
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setCertificateChecking:(Ljava/security/cert/X509Certificate;)V
        16: .line 1175
            goto 19
        17: .line 1176
      StackMap locals:
      StackMap stack:
            aload 1 /* cert */
            instanceof org.bouncycastle.x509.X509AttributeCertificate
            ifeq 19
        18: .line 1178
            aload 4 /* crlselect */
            aload 1 /* cert */
            checkcast org.bouncycastle.x509.X509AttributeCertificate
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setAttrCertificateChecking:(Lorg/bouncycastle/x509/X509AttributeCertificate;)V
        19: .line 1183
      StackMap locals:
      StackMap stack:
            aload 4 /* crlselect */
            iconst_1
            invokevirtual org.bouncycastle.x509.X509CRLStoreSelector.setCompleteCRLEnabled:(Z)V
        20: .line 1185
            getstatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.CRL_UTIL:Lorg/bouncycastle/jce/provider/PKIXCRLUtil;
            aload 4 /* crlselect */
            aload 3 /* paramsPKIX */
            aload 2 /* currentDate */
            invokevirtual org.bouncycastle.jce.provider.PKIXCRLUtil.findCRLs:(Lorg/bouncycastle/x509/X509CRLStoreSelector;Lorg/bouncycastle/x509/ExtendedPKIXParameters;Ljava/util/Date;)Ljava/util/Set;
            astore 5 /* crls */
        start local 5 // java.util.Set crls
        21: .line 1187
            aload 5 /* crls */
            invokeinterface java.util.Set.isEmpty:()Z
            ifeq 27
        22: .line 1189
            aload 1 /* cert */
            instanceof org.bouncycastle.x509.X509AttributeCertificate
            ifeq 25
        23: .line 1191
            aload 1 /* cert */
            checkcast org.bouncycastle.x509.X509AttributeCertificate
            astore 6 /* aCert */
        start local 6 // org.bouncycastle.x509.X509AttributeCertificate aCert
        24: .line 1193
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            new java.lang.StringBuilder
            dup
            ldc "No CRLs found for issuer \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 6 /* aCert */
            invokeinterface org.bouncycastle.x509.X509AttributeCertificate.getIssuer:()Lorg/bouncycastle/x509/AttributeCertificateIssuer;
            invokevirtual org.bouncycastle.x509.AttributeCertificateIssuer.getPrincipals:()[Ljava/security/Principal;
            iconst_0
            aaload
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        end local 6 // org.bouncycastle.x509.X509AttributeCertificate aCert
        25: .line 1197
      StackMap locals: java.util.Set
      StackMap stack:
            aload 1 /* cert */
            checkcast java.security.cert.X509Certificate
            astore 6 /* xCert */
        start local 6 // java.security.cert.X509Certificate xCert
        26: .line 1199
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            new java.lang.StringBuilder
            dup
            ldc "No CRLs found for issuer \""
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 6 /* xCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "\""
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        end local 6 // java.security.cert.X509Certificate xCert
        27: .line 1202
      StackMap locals:
      StackMap stack:
            aload 5 /* crls */
            areturn
        end local 5 // java.util.Set crls
        end local 4 // org.bouncycastle.x509.X509CRLStoreSelector crlselect
        end local 3 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
        end local 2 // java.util.Date currentDate
        end local 1 // java.lang.Object cert
        end local 0 // org.bouncycastle.asn1.x509.DistributionPoint dp
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0   28     0           dp  Lorg/bouncycastle/asn1/x509/DistributionPoint;
            0   28     1         cert  Ljava/lang/Object;
            0   28     2  currentDate  Ljava/util/Date;
            0   28     3   paramsPKIX  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            1   28     4    crlselect  Lorg/bouncycastle/x509/X509CRLStoreSelector;
            2    9     5      issuers  Ljava/util/Set;
           11   14     5            e  Lorg/bouncycastle/jce/provider/AnnotatedException;
           21   28     5         crls  Ljava/util/Set;
           24   25     6        aCert  Lorg/bouncycastle/x509/X509AttributeCertificate;
           26   27     6        xCert  Ljava/security/cert/X509Certificate;
      Exception table:
        from    to  target  type
           1     9      10  Class org.bouncycastle.jce.provider.AnnotatedException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
             Name  Flags
      dp           
      cert         
      currentDate  
      paramsPKIX   

  protected static java.util.Date getValidCertDateFromValidityModel(org.bouncycastle.x509.ExtendedPKIXParameters, java.security.cert.CertPath, int);
    descriptor: (Lorg/bouncycastle/x509/ExtendedPKIXParameters;Ljava/security/cert/CertPath;I)Ljava/util/Date;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=5, args_size=3
        start local 0 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
        start local 1 // java.security.cert.CertPath certPath
        start local 2 // int index
         0: .line 1209
            aload 0 /* paramsPKIX */
            invokevirtual org.bouncycastle.x509.ExtendedPKIXParameters.getValidityModel:()I
            iconst_1
            if_icmpne 35
         1: .line 1212
            iload 2 /* index */
            ifgt 3
         2: .line 1214
            aload 0 /* paramsPKIX */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getValidDate:(Ljava/security/cert/PKIXParameters;)Ljava/util/Date;
            areturn
         3: .line 1219
      StackMap locals:
      StackMap stack:
            iload 2 /* index */
            iconst_1
            isub
            ifne 30
         4: .line 1221
            aconst_null
            astore 3 /* dateOfCertgen */
        start local 3 // org.bouncycastle.asn1.DERGeneralizedTime dateOfCertgen
         5: .line 1224
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
            iload 2 /* index */
            iconst_1
            isub
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            getstatic org.bouncycastle.asn1.isismtt.ISISMTTObjectIdentifiers.id_isismtt_at_dateOfCertGen:Lorg/bouncycastle/asn1/ASN1ObjectIdentifier;
            invokevirtual org.bouncycastle.asn1.ASN1ObjectIdentifier.getId:()Ljava/lang/String;
            invokevirtual java.security.cert.X509Certificate.getExtensionValue:(Ljava/lang/String;)[B
            astore 4 /* extBytes */
        start local 4 // byte[] extBytes
         6: .line 1225
            aload 4 /* extBytes */
            ifnull 17
         7: .line 1227
            aload 4 /* extBytes */
            invokestatic org.bouncycastle.asn1.ASN1Object.fromByteArray:([B)Lorg/bouncycastle/asn1/ASN1Object;
            invokestatic org.bouncycastle.asn1.DERGeneralizedTime.getInstance:(Ljava/lang/Object;)Lorg/bouncycastle/asn1/DERGeneralizedTime;
            astore 3 /* dateOfCertgen */
        end local 4 // byte[] extBytes
         8: .line 1229
            goto 17
         9: .line 1230
      StackMap locals: org.bouncycastle.x509.ExtendedPKIXParameters java.security.cert.CertPath int org.bouncycastle.asn1.DERGeneralizedTime
      StackMap stack: java.io.IOException
            pop
        10: .line 1232
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        11: .line 1233
            ldc "Date of cert gen extension could not be read."
        12: .line 1232
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        13: .line 1235
      StackMap locals:
      StackMap stack: java.lang.IllegalArgumentException
            pop
        14: .line 1237
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        15: .line 1238
            ldc "Date of cert gen extension could not be read."
        16: .line 1237
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;)V
            athrow
        17: .line 1240
      StackMap locals:
      StackMap stack:
            aload 3 /* dateOfCertgen */
            ifnull 25
        18: .line 1244
            aload 3 /* dateOfCertgen */
            invokevirtual org.bouncycastle.asn1.DERGeneralizedTime.getDate:()Ljava/util/Date;
        19: areturn
        20: .line 1246
      StackMap locals:
      StackMap stack: java.text.ParseException
            astore 4 /* e */
        start local 4 // java.text.ParseException e
        21: .line 1248
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
        22: .line 1249
            ldc "Date from date of cert gen extension could not be parsed."
        23: .line 1250
            aload 4 /* e */
        24: .line 1248
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.text.ParseException e
        25: .line 1253
      StackMap locals:
      StackMap stack:
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
        26: .line 1254
            iload 2 /* index */
            iconst_1
            isub
        27: .line 1253
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
        28: .line 1254
            invokevirtual java.security.cert.X509Certificate.getNotBefore:()Ljava/util/Date;
        29: .line 1253
            areturn
        end local 3 // org.bouncycastle.asn1.DERGeneralizedTime dateOfCertgen
        30: .line 1258
      StackMap locals:
      StackMap stack:
            aload 1 /* certPath */
            invokevirtual java.security.cert.CertPath.getCertificates:()Ljava/util/List;
        31: .line 1259
            iload 2 /* index */
            iconst_1
            isub
        32: .line 1258
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
        33: .line 1259
            invokevirtual java.security.cert.X509Certificate.getNotBefore:()Ljava/util/Date;
        34: .line 1258
            areturn
        35: .line 1265
      StackMap locals:
      StackMap stack:
            aload 0 /* paramsPKIX */
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.getValidDate:(Ljava/security/cert/PKIXParameters;)Ljava/util/Date;
            areturn
        end local 2 // int index
        end local 1 // java.security.cert.CertPath certPath
        end local 0 // org.bouncycastle.x509.ExtendedPKIXParameters paramsPKIX
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   36     0     paramsPKIX  Lorg/bouncycastle/x509/ExtendedPKIXParameters;
            0   36     1       certPath  Ljava/security/cert/CertPath;
            0   36     2          index  I
            5   30     3  dateOfCertgen  Lorg/bouncycastle/asn1/DERGeneralizedTime;
            6    8     4       extBytes  [B
           21   25     4              e  Ljava/text/ParseException;
      Exception table:
        from    to  target  type
           5     8       9  Class java.io.IOException
           5     8      13  Class java.lang.IllegalArgumentException
          18    19      20  Class java.text.ParseException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      paramsPKIX  
      certPath    
      index       

  protected static java.security.PublicKey getNextWorkingKey(java.util.List, int);
    descriptor: (Ljava/util/List;I)Ljava/security/PublicKey;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=6, locals=11, args_size=2
        start local 0 // java.util.List certs
        start local 1 // int index
         0: .line 1293
            aload 0 /* certs */
            iload 1 /* index */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.Certificate
            astore 2 /* cert */
        start local 2 // java.security.cert.Certificate cert
         1: .line 1294
            aload 2 /* cert */
            invokevirtual java.security.cert.Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 3 /* pubKey */
        start local 3 // java.security.PublicKey pubKey
         2: .line 1295
            aload 3 /* pubKey */
            instanceof java.security.interfaces.DSAPublicKey
            ifne 4
         3: .line 1297
            aload 3 /* pubKey */
            areturn
         4: .line 1299
      StackMap locals: java.security.cert.Certificate java.security.PublicKey
      StackMap stack:
            aload 3 /* pubKey */
            checkcast java.security.interfaces.DSAPublicKey
            astore 4 /* dsaPubKey */
        start local 4 // java.security.interfaces.DSAPublicKey dsaPubKey
         5: .line 1300
            aload 4 /* dsaPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            ifnull 7
         6: .line 1302
            aload 4 /* dsaPubKey */
            areturn
         7: .line 1304
      StackMap locals: java.security.interfaces.DSAPublicKey
      StackMap stack:
            iload 1 /* index */
            iconst_1
            iadd
            istore 5 /* i */
        start local 5 // int i
         8: goto 28
         9: .line 1306
      StackMap locals: int
      StackMap stack:
            aload 0 /* certs */
            iload 5 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 6 /* parentCert */
        start local 6 // java.security.cert.X509Certificate parentCert
        10: .line 1307
            aload 6 /* parentCert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            astore 3 /* pubKey */
        11: .line 1308
            aload 3 /* pubKey */
            instanceof java.security.interfaces.DSAPublicKey
            ifne 15
        12: .line 1310
            new java.security.cert.CertPathValidatorException
            dup
        13: .line 1311
            ldc "DSA parameters cannot be inherited from previous certificate."
        14: .line 1310
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        15: .line 1313
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 3 /* pubKey */
            checkcast java.security.interfaces.DSAPublicKey
            astore 7 /* prevDSAPubKey */
        start local 7 // java.security.interfaces.DSAPublicKey prevDSAPubKey
        16: .line 1314
            aload 7 /* prevDSAPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            ifnonnull 18
        17: .line 1316
            goto 27
        18: .line 1318
      StackMap locals: java.security.interfaces.DSAPublicKey
      StackMap stack:
            aload 7 /* prevDSAPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getParams:()Ljava/security/interfaces/DSAParams;
            astore 8 /* dsaParams */
        start local 8 // java.security.interfaces.DSAParams dsaParams
        19: .line 1319
            new java.security.spec.DSAPublicKeySpec
            dup
        20: .line 1320
            aload 4 /* dsaPubKey */
            invokeinterface java.security.interfaces.DSAPublicKey.getY:()Ljava/math/BigInteger;
            aload 8 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getP:()Ljava/math/BigInteger;
            aload 8 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getQ:()Ljava/math/BigInteger;
            aload 8 /* dsaParams */
            invokeinterface java.security.interfaces.DSAParams.getG:()Ljava/math/BigInteger;
        21: .line 1319
            invokespecial java.security.spec.DSAPublicKeySpec.<init>:(Ljava/math/BigInteger;Ljava/math/BigInteger;Ljava/math/BigInteger;Ljava/math/BigInteger;)V
            astore 9 /* dsaPubKeySpec */
        start local 9 // java.security.spec.DSAPublicKeySpec dsaPubKeySpec
        22: .line 1323
            ldc "DSA"
            getstatic org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME:Ljava/lang/String;
            invokestatic java.security.KeyFactory.getInstance:(Ljava/lang/String;Ljava/lang/String;)Ljava/security/KeyFactory;
            astore 10 /* keyFactory */
        start local 10 // java.security.KeyFactory keyFactory
        23: .line 1324
            aload 10 /* keyFactory */
            aload 9 /* dsaPubKeySpec */
            invokevirtual java.security.KeyFactory.generatePublic:(Ljava/security/spec/KeySpec;)Ljava/security/PublicKey;
        24: areturn
        end local 10 // java.security.KeyFactory keyFactory
        25: .line 1326
      StackMap locals: java.util.List int java.security.cert.Certificate java.security.PublicKey java.security.interfaces.DSAPublicKey int java.security.cert.X509Certificate java.security.interfaces.DSAPublicKey java.security.interfaces.DSAParams java.security.spec.DSAPublicKeySpec
      StackMap stack: java.lang.Exception
            astore 10 /* exception */
        start local 10 // java.lang.Exception exception
        26: .line 1328
            new java.lang.RuntimeException
            dup
            aload 10 /* exception */
            invokevirtual java.lang.Exception.getMessage:()Ljava/lang/String;
            invokespecial java.lang.RuntimeException.<init>:(Ljava/lang/String;)V
            athrow
        end local 10 // java.lang.Exception exception
        end local 9 // java.security.spec.DSAPublicKeySpec dsaPubKeySpec
        end local 8 // java.security.interfaces.DSAParams dsaParams
        end local 7 // java.security.interfaces.DSAPublicKey prevDSAPubKey
        end local 6 // java.security.cert.X509Certificate parentCert
        27: .line 1304
      StackMap locals: java.util.List int java.security.cert.Certificate java.security.PublicKey java.security.interfaces.DSAPublicKey int
      StackMap stack:
            iinc 5 /* i */ 1
      StackMap locals:
      StackMap stack:
        28: iload 5 /* i */
            aload 0 /* certs */
            invokeinterface java.util.List.size:()I
            if_icmplt 9
        end local 5 // int i
        29: .line 1331
            new java.security.cert.CertPathValidatorException
            dup
            ldc "DSA parameters cannot be inherited from previous certificate."
            invokespecial java.security.cert.CertPathValidatorException.<init>:(Ljava/lang/String;)V
            athrow
        end local 4 // java.security.interfaces.DSAPublicKey dsaPubKey
        end local 3 // java.security.PublicKey pubKey
        end local 2 // java.security.cert.Certificate cert
        end local 1 // int index
        end local 0 // java.util.List certs
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   30     0          certs  Ljava/util/List;
            0   30     1          index  I
            1   30     2           cert  Ljava/security/cert/Certificate;
            2   30     3         pubKey  Ljava/security/PublicKey;
            5   30     4      dsaPubKey  Ljava/security/interfaces/DSAPublicKey;
            8   29     5              i  I
           10   27     6     parentCert  Ljava/security/cert/X509Certificate;
           16   27     7  prevDSAPubKey  Ljava/security/interfaces/DSAPublicKey;
           19   27     8      dsaParams  Ljava/security/interfaces/DSAParams;
           22   27     9  dsaPubKeySpec  Ljava/security/spec/DSAPublicKeySpec;
           23   25    10     keyFactory  Ljava/security/KeyFactory;
           26   27    10      exception  Ljava/lang/Exception;
      Exception table:
        from    to  target  type
          22    24      25  Class java.lang.Exception
    Exceptions:
      throws java.security.cert.CertPathValidatorException
    MethodParameters:
       Name  Flags
      certs  
      index  

  protected static java.util.Collection findIssuerCerts(java.security.cert.X509Certificate, org.bouncycastle.x509.ExtendedPKIXBuilderParameters);
    descriptor: (Ljava/security/cert/X509Certificate;Lorg/bouncycastle/x509/ExtendedPKIXBuilderParameters;)Ljava/util/Collection;
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=4, locals=6, args_size=2
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // org.bouncycastle.x509.ExtendedPKIXBuilderParameters pkixParams
         0: .line 1351
            new org.bouncycastle.x509.X509CertStoreSelector
            dup
            invokespecial org.bouncycastle.x509.X509CertStoreSelector.<init>:()V
            astore 2 /* certSelect */
        start local 2 // org.bouncycastle.x509.X509CertStoreSelector certSelect
         1: .line 1352
            new java.util.HashSet
            dup
            invokespecial java.util.HashSet.<init>:()V
            astore 3 /* certs */
        start local 3 // java.util.Set certs
         2: .line 1355
            aload 2 /* certSelect */
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.getEncoded:()[B
            invokevirtual org.bouncycastle.x509.X509CertStoreSelector.setSubject:([B)V
         3: .line 1356
            goto 8
         4: .line 1357
      StackMap locals: java.security.cert.X509Certificate org.bouncycastle.x509.ExtendedPKIXBuilderParameters org.bouncycastle.x509.X509CertStoreSelector java.util.Set
      StackMap stack: java.io.IOException
            astore 4 /* ex */
        start local 4 // java.io.IOException ex
         5: .line 1359
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
         6: .line 1360
            ldc "Subject criteria for certificate selector to find issuer certificate could not be set."
            aload 4 /* ex */
         7: .line 1359
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 4 // java.io.IOException ex
         8: .line 1367
      StackMap locals:
      StackMap stack:
            new java.util.ArrayList
            dup
            invokespecial java.util.ArrayList.<init>:()V
            astore 5 /* matches */
        start local 5 // java.util.List matches
         9: .line 1369
            aload 5 /* matches */
            aload 2 /* certSelect */
            aload 1 /* pkixParams */
            invokevirtual org.bouncycastle.x509.ExtendedPKIXBuilderParameters.getCertStores:()Ljava/util/List;
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.findCertificates:(Lorg/bouncycastle/x509/X509CertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        10: .line 1370
            aload 5 /* matches */
            aload 2 /* certSelect */
            aload 1 /* pkixParams */
            invokevirtual org.bouncycastle.x509.ExtendedPKIXBuilderParameters.getStores:()Ljava/util/List;
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.findCertificates:(Lorg/bouncycastle/x509/X509CertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        11: .line 1371
            aload 5 /* matches */
            aload 2 /* certSelect */
            aload 1 /* pkixParams */
            invokevirtual org.bouncycastle.x509.ExtendedPKIXBuilderParameters.getAdditionalStores:()Ljava/util/List;
            invokestatic org.bouncycastle.jce.provider.CertPathValidatorUtilities.findCertificates:(Lorg/bouncycastle/x509/X509CertStoreSelector;Ljava/util/List;)Ljava/util/Collection;
            invokeinterface java.util.List.addAll:(Ljava/util/Collection;)Z
            pop
        12: .line 1373
            aload 5 /* matches */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 4 /* iter */
        end local 5 // java.util.List matches
        start local 4 // java.util.Iterator iter
        13: .line 1374
            goto 16
        end local 4 // java.util.Iterator iter
        14: .line 1375
      StackMap locals:
      StackMap stack: org.bouncycastle.jce.provider.AnnotatedException
            astore 5 /* e */
        start local 5 // org.bouncycastle.jce.provider.AnnotatedException e
        15: .line 1377
            new org.bouncycastle.jce.provider.AnnotatedException
            dup
            ldc "Issuer certificate cannot be searched."
            aload 5 /* e */
            invokespecial org.bouncycastle.jce.provider.AnnotatedException.<init>:(Ljava/lang/String;Ljava/lang/Throwable;)V
            athrow
        end local 5 // org.bouncycastle.jce.provider.AnnotatedException e
        start local 4 // java.util.Iterator iter
        16: .line 1380
      StackMap locals: java.util.Iterator
      StackMap stack:
            aconst_null
            astore 5 /* issuer */
        start local 5 // java.security.cert.X509Certificate issuer
        17: .line 1381
            goto 20
        18: .line 1383
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 4 /* iter */
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 5 /* issuer */
        19: .line 1386
            aload 3 /* certs */
            aload 5 /* issuer */
            invokeinterface java.util.Set.add:(Ljava/lang/Object;)Z
            pop
        20: .line 1381
      StackMap locals:
      StackMap stack:
            aload 4 /* iter */
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 18
        21: .line 1388
            aload 3 /* certs */
            areturn
        end local 5 // java.security.cert.X509Certificate issuer
        end local 4 // java.util.Iterator iter
        end local 3 // java.util.Set certs
        end local 2 // org.bouncycastle.x509.X509CertStoreSelector certSelect
        end local 1 // org.bouncycastle.x509.ExtendedPKIXBuilderParameters pkixParams
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot        Name  Signature
            0   22     0        cert  Ljava/security/cert/X509Certificate;
            0   22     1  pkixParams  Lorg/bouncycastle/x509/ExtendedPKIXBuilderParameters;
            1   22     2  certSelect  Lorg/bouncycastle/x509/X509CertStoreSelector;
            2   22     3       certs  Ljava/util/Set;
            5    8     4          ex  Ljava/io/IOException;
           13   14     4        iter  Ljava/util/Iterator;
           16   22     4        iter  Ljava/util/Iterator;
            9   13     5     matches  Ljava/util/List;
           15   16     5           e  Lorg/bouncycastle/jce/provider/AnnotatedException;
           17   22     5      issuer  Ljava/security/cert/X509Certificate;
      Exception table:
        from    to  target  type
           2     3       4  Class java.io.IOException
           8    13      14  Class org.bouncycastle.jce.provider.AnnotatedException
    Exceptions:
      throws org.bouncycastle.jce.provider.AnnotatedException
    MethodParameters:
            Name  Flags
      cert        
      pkixParams  

  protected static void verifyX509Certificate(java.security.cert.X509Certificate, java.security.PublicKey, java.lang.String);
    descriptor: (Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
    flags: (0x000c) ACC_PROTECTED, ACC_STATIC
    Code:
      stack=3, locals=3, args_size=3
        start local 0 // java.security.cert.X509Certificate cert
        start local 1 // java.security.PublicKey publicKey
        start local 2 // java.lang.String sigProvider
         0: .line 1395
            aload 2 /* sigProvider */
            ifnonnull 3
         1: .line 1397
            aload 0 /* cert */
            aload 1 /* publicKey */
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;)V
         2: .line 1398
            goto 4
         3: .line 1401
      StackMap locals:
      StackMap stack:
            aload 0 /* cert */
            aload 1 /* publicKey */
            aload 2 /* sigProvider */
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;Ljava/lang/String;)V
         4: .line 1403
      StackMap locals:
      StackMap stack:
            return
        end local 2 // java.lang.String sigProvider
        end local 1 // java.security.PublicKey publicKey
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot         Name  Signature
            0    5     0         cert  Ljava/security/cert/X509Certificate;
            0    5     1    publicKey  Ljava/security/PublicKey;
            0    5     2  sigProvider  Ljava/lang/String;
    Exceptions:
      throws java.security.GeneralSecurityException
    MethodParameters:
             Name  Flags
      cert         
      publicKey    
      sigProvider  
}
SourceFile: "CertPathValidatorUtilities.java"
InnerClasses:
  public Builder = org.bouncycastle.jce.X509LDAPCertStoreParameters$Builder of org.bouncycastle.jce.X509LDAPCertStoreParameters