PKIXCertPathReviewer.smali

.class public Lorg/spongycastle/x509/PKIXCertPathReviewer;
.super Lorg/spongycastle/x509/CertPathValidatorUtilities;
.source "PKIXCertPathReviewer.java"


# static fields
.field private static final AUTH_INFO_ACCESS:Ljava/lang/String;

.field private static final CRL_DIST_POINTS:Ljava/lang/String;

.field private static final QC_STATEMENT:Ljava/lang/String;

.field private static final RESOURCE_NAME:Ljava/lang/String; = "org.spongycastle.x509.CertPathReviewerMessages"


# instance fields
.field protected certPath:Ljava/security/cert/CertPath;

.field protected certs:Ljava/util/List;

.field protected errors:[Ljava/util/List;

.field private initialized:Z

.field protected n:I

.field protected notifications:[Ljava/util/List;

.field protected pkixParams:Ljava/security/cert/PKIXParameters;

.field protected policyTree:Ljava/security/cert/PolicyNode;

.field protected subjectPublicKey:Ljava/security/PublicKey;

.field protected trustAnchor:Ljava/security/cert/TrustAnchor;

.field protected validDate:Ljava/util/Date;


# direct methods
.method static constructor <clinit>()V
    .registers 1

    .prologue
    .line 87
    sget-object v0, Lorg/spongycastle/asn1/x509/X509Extensions;->QCStatements:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v0

    sput-object v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->QC_STATEMENT:Ljava/lang/String;

    .line 88
    sget-object v0, Lorg/spongycastle/asn1/x509/X509Extensions;->CRLDistributionPoints:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v0

    sput-object v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_DIST_POINTS:Ljava/lang/String;

    .line 89
    sget-object v0, Lorg/spongycastle/asn1/x509/X509Extensions;->AuthorityInfoAccess:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v0

    sput-object v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->AUTH_INFO_ACCESS:Ljava/lang/String;

    return-void
.end method

.method public constructor <init>()V
    .registers 1

    .prologue
    .line 189
    invoke-direct {p0}, Lorg/spongycastle/x509/CertPathValidatorUtilities;-><init>()V

    .line 191
    return-void
.end method

.method public constructor <init>(Ljava/security/cert/CertPath;Ljava/security/cert/PKIXParameters;)V
    .registers 3

    .prologue
    .line 181
    invoke-direct {p0}, Lorg/spongycastle/x509/CertPathValidatorUtilities;-><init>()V

    .line 182
    invoke-virtual {p0, p1, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->init(Ljava/security/cert/CertPath;Ljava/security/cert/PKIXParameters;)V

    .line 183
    return-void
.end method

.method private IPtoString([B)Ljava/lang/String;
    .registers 5

    .prologue
    .line 1996
    :try_start_0
    invoke-static {p1}, Ljava/net/InetAddress;->getByAddress([B)Ljava/net/InetAddress;

    move-result-object v0

    invoke-virtual {v0}, Ljava/net/InetAddress;->getHostAddress()Ljava/lang/String;
    :try_end_7
    .catch Ljava/lang/Exception; {:try_start_0 .. :try_end_7} :catch_9

    move-result-object v0

    .line 2011
    :goto_8
    return-object v0

    .line 2000
    :catch_9
    move-exception v0

    new-instance v1, Ljava/lang/StringBuffer;

    invoke-direct {v1}, Ljava/lang/StringBuffer;-><init>()V

    .line 2002
    const/4 v0, 0x0

    :goto_10
    array-length v2, p1

    if-eq v0, v2, :cond_26

    .line 2004
    aget-byte v2, p1, v0

    and-int/lit16 v2, v2, 0xff

    invoke-static {v2}, Ljava/lang/Integer;->toHexString(I)Ljava/lang/String;

    move-result-object v2

    invoke-virtual {v1, v2}, Ljava/lang/StringBuffer;->append(Ljava/lang/String;)Ljava/lang/StringBuffer;

    .line 2005
    const/16 v2, 0x20

    invoke-virtual {v1, v2}, Ljava/lang/StringBuffer;->append(C)Ljava/lang/StringBuffer;

    .line 2002
    add-int/lit8 v0, v0, 0x1

    goto :goto_10

    .line 2008
    :cond_26
    invoke-virtual {v1}, Ljava/lang/StringBuffer;->toString()Ljava/lang/String;

    move-result-object v0

    goto :goto_8
.end method

.method private checkCriticalExtensions()V
    .registers 12

    .prologue
    .line 1830
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v1}, Ljava/security/cert/PKIXParameters;->getCertPathCheckers()Ljava/util/List;

    move-result-object v4

    .line 1831
    invoke-interface {v4}, Ljava/util/List;->iterator()Ljava/util/Iterator;

    move-result-object v2

    .line 1837
    :goto_a
    :try_start_a
    invoke-interface {v2}, Ljava/util/Iterator;->hasNext()Z

    move-result v1

    if-eqz v1, :cond_50

    .line 1839
    invoke-interface {v2}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v1

    check-cast v1, Ljava/security/cert/PKIXCertPathChecker;

    const/4 v3, 0x0

    invoke-virtual {v1, v3}, Ljava/security/cert/PKIXCertPathChecker;->init(Z)V
    :try_end_1a
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_a .. :try_end_1a} :catch_1b
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_a .. :try_end_1a} :catch_43

    goto :goto_a

    .line 1842
    :catch_1b
    move-exception v1

    .line 1844
    :try_start_1c
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.certPathCheckerError"

    const/4 v5, 0x3

    new-array v5, v5, [Ljava/lang/Object;

    const/4 v6, 0x0

    .line 1845
    invoke-virtual {v1}, Ljava/security/cert/CertPathValidatorException;->getMessage()Ljava/lang/String;

    move-result-object v7

    aput-object v7, v5, v6

    const/4 v6, 0x1

    aput-object v1, v5, v6

    const/4 v6, 0x2

    invoke-virtual {v1}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v7

    invoke-virtual {v7}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v7

    aput-object v7, v5, v6

    invoke-direct {v2, v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1846
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2, v1}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v3
    :try_end_43
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_1c .. :try_end_43} :catch_43

    .line 1914
    :catch_43
    move-exception v1

    .line 1916
    invoke-virtual {v1}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v2

    invoke-virtual {v1}, Lorg/spongycastle/x509/CertPathReviewerException;->getIndex()I

    move-result v1

    invoke-virtual {p0, v2, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1918
    :cond_4f
    return-void

    .line 1857
    :cond_50
    :try_start_50
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v1}, Ljava/util/List;->size()I

    move-result v1

    add-int/lit8 v1, v1, -0x1

    move v3, v1

    :goto_59
    if-ltz v3, :cond_4f

    .line 1859
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v1, v3}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v1

    move-object v0, v1

    check-cast v0, Ljava/security/cert/X509Certificate;

    move-object v2, v0

    .line 1861
    invoke-virtual {v2}, Ljava/security/cert/X509Certificate;->getCriticalExtensionOIDs()Ljava/util/Set;

    move-result-object v5

    .line 1862
    if-eqz v5, :cond_126

    invoke-interface {v5}, Ljava/util/Set;->isEmpty()Z

    move-result v1

    if-nez v1, :cond_126

    .line 1867
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->KEY_USAGE:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1868
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CERTIFICATE_POLICIES:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1869
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->POLICY_MAPPINGS:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1870
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->INHIBIT_ANY_POLICY:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1871
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1872
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->DELTA_CRL_INDICATOR:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1873
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->POLICY_CONSTRAINTS:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1874
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->BASIC_CONSTRAINTS:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1875
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->SUBJECT_ALTERNATIVE_NAME:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1876
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->NAME_CONSTRAINTS:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1879
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->QC_STATEMENT:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    move-result v1

    if-eqz v1, :cond_b6

    .line 1881
    invoke-direct {p0, v2, v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->processQcStatements(Ljava/security/cert/X509Certificate;I)Z

    move-result v1

    if-eqz v1, :cond_b6

    .line 1883
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->QC_STATEMENT:Ljava/lang/String;

    invoke-interface {v5, v1}, Ljava/util/Set;->remove(Ljava/lang/Object;)Z

    .line 1887
    :cond_b6
    invoke-interface {v4}, Ljava/util/List;->iterator()Ljava/util/Iterator;

    move-result-object v6

    .line 1888
    :goto_ba
    invoke-interface {v6}, Ljava/util/Iterator;->hasNext()Z
    :try_end_bd
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_50 .. :try_end_bd} :catch_43

    move-result v1

    if-eqz v1, :cond_f8

    .line 1892
    :try_start_c0
    invoke-interface {v6}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v1

    check-cast v1, Ljava/security/cert/PKIXCertPathChecker;

    invoke-virtual {v1, v2, v5}, Ljava/security/cert/PKIXCertPathChecker;->check(Ljava/security/cert/Certificate;Ljava/util/Collection;)V
    :try_end_c9
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_c0 .. :try_end_c9} :catch_ca
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_c0 .. :try_end_c9} :catch_43

    goto :goto_ba

    .line 1894
    :catch_ca
    move-exception v1

    .line 1896
    :try_start_cb
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.criticalExtensionError"

    const/4 v6, 0x3

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    .line 1897
    invoke-virtual {v1}, Ljava/security/cert/CertPathValidatorException;->getMessage()Ljava/lang/String;

    move-result-object v8

    aput-object v8, v6, v7

    const/4 v7, 0x1

    aput-object v1, v6, v7

    const/4 v7, 0x2

    invoke-virtual {v1}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v8

    invoke-virtual {v8}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v8

    aput-object v8, v6, v7

    invoke-direct {v2, v4, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1898
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-virtual {v1}, Ljava/security/cert/CertPathValidatorException;->getCause()Ljava/lang/Throwable;

    move-result-object v1

    iget-object v5, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v4, v2, v1, v5, v3}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1901
    :cond_f8
    invoke-interface {v5}, Ljava/util/Set;->isEmpty()Z

    move-result v1

    if-nez v1, :cond_126

    .line 1904
    invoke-interface {v5}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v2

    .line 1905
    :goto_102
    invoke-interface {v2}, Ljava/util/Iterator;->hasNext()Z

    move-result v1

    if-eqz v1, :cond_126

    .line 1907
    new-instance v5, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v6, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.unknownCriticalExt"

    const/4 v1, 0x1

    new-array v8, v1, [Ljava/lang/Object;

    const/4 v9, 0x0

    new-instance v10, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    .line 1908
    invoke-interface {v2}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v1

    check-cast v1, Ljava/lang/String;

    invoke-direct {v10, v1}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;-><init>(Ljava/lang/String;)V

    aput-object v10, v8, v9

    invoke-direct {v5, v6, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1909
    invoke-virtual {p0, v5, v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_125
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_cb .. :try_end_125} :catch_43

    goto :goto_102

    .line 1857
    :cond_126
    add-int/lit8 v1, v3, -0x1

    move v3, v1

    goto/16 :goto_59
.end method

.method private checkNameConstraints()V
    .registers 10

    .prologue
    const/4 v2, 0x0

    .line 391
    new-instance v5, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;

    invoke-direct {v5}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;-><init>()V

    .line 401
    :try_start_6
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0}, Ljava/util/List;->size()I

    move-result v0

    add-int/lit8 v0, v0, -0x1

    move v4, v0

    :goto_f
    if-lez v4, :cond_88

    .line 409
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0, v4}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v0

    check-cast v0, Ljava/security/cert/X509Certificate;

    .line 413
    invoke-static {v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z

    move-result v1

    if-nez v1, :cond_fa

    .line 415
    invoke-static {v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getSubjectPrincipal(Ljava/security/cert/X509Certificate;)Ljavax/security/auth/x500/X500Principal;

    move-result-object v3

    .line 416
    new-instance v1, Lorg/spongycastle/asn1/ASN1InputStream;

    new-instance v6, Ljava/io/ByteArrayInputStream;

    invoke-virtual {v3}, Ljavax/security/auth/x500/X500Principal;->getEncoded()[B

    move-result-object v7

    invoke-direct {v6, v7}, Ljava/io/ByteArrayInputStream;-><init>([B)V

    invoke-direct {v1, v6}, Lorg/spongycastle/asn1/ASN1InputStream;-><init>(Ljava/io/InputStream;)V
    :try_end_31
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_6 .. :try_end_31} :catch_7c

    .line 421
    :try_start_31
    invoke-virtual {v1}, Lorg/spongycastle/asn1/ASN1InputStream;->readObject()Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v1

    check-cast v1, Lorg/spongycastle/asn1/ASN1Sequence;
    :try_end_37
    .catch Ljava/io/IOException; {:try_start_31 .. :try_end_37} :catch_5f
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_31 .. :try_end_37} :catch_7c

    .line 432
    :try_start_37
    invoke-virtual {v5, v1}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->checkPermittedDN(Lorg/spongycastle/asn1/ASN1Sequence;)V
    :try_end_3a
    .catch Lorg/spongycastle/jce/provider/PKIXNameConstraintValidatorException; {:try_start_37 .. :try_end_3a} :catch_89
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_37 .. :try_end_3a} :catch_7c

    .line 443
    :try_start_3a
    invoke-virtual {v5, v1}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->checkExcludedDN(Lorg/spongycastle/asn1/ASN1Sequence;)V
    :try_end_3d
    .catch Lorg/spongycastle/jce/provider/PKIXNameConstraintValidatorException; {:try_start_3a .. :try_end_3d} :catch_aa
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_3a .. :try_end_3d} :catch_7c

    .line 455
    :try_start_3d
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->SUBJECT_ALTERNATIVE_NAME:Ljava/lang/String;

    invoke-static {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v1

    check-cast v1, Lorg/spongycastle/asn1/ASN1Sequence;
    :try_end_45
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_3d .. :try_end_45} :catch_cb
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_3d .. :try_end_45} :catch_7c

    .line 463
    if-eqz v1, :cond_fa

    move v3, v2

    .line 465
    :goto_48
    :try_start_48
    invoke-virtual {v1}, Lorg/spongycastle/asn1/ASN1Sequence;->size()I

    move-result v6

    if-ge v3, v6, :cond_fa

    .line 467
    invoke-virtual {v1, v3}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v6

    invoke-static {v6}, Lorg/spongycastle/asn1/x509/GeneralName;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/GeneralName;
    :try_end_55
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_48 .. :try_end_55} :catch_7c

    move-result-object v6

    .line 471
    :try_start_56
    invoke-virtual {v5, v6}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->checkPermitted(Lorg/spongycastle/asn1/x509/GeneralName;)V

    .line 472
    invoke-virtual {v5, v6}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->checkExcluded(Lorg/spongycastle/asn1/x509/GeneralName;)V
    :try_end_5c
    .catch Lorg/spongycastle/jce/provider/PKIXNameConstraintValidatorException; {:try_start_56 .. :try_end_5c} :catch_dd
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_56 .. :try_end_5c} :catch_7c

    .line 465
    add-int/lit8 v3, v3, 0x1

    goto :goto_48

    .line 423
    :catch_5f
    move-exception v0

    .line 425
    :try_start_60
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.ncSubjectNameError"

    const/4 v6, 0x1

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v8, v3}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v1, v2, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 427
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2
    :try_end_7c
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_60 .. :try_end_7c} :catch_7c

    .line 611
    :catch_7c
    move-exception v0

    .line 613
    invoke-virtual {v0}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v1

    invoke-virtual {v0}, Lorg/spongycastle/x509/CertPathReviewerException;->getIndex()I

    move-result v0

    invoke-virtual {p0, v1, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 616
    :cond_88
    return-void

    .line 434
    :catch_89
    move-exception v0

    .line 436
    :try_start_8a
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.notPermittedDN"

    const/4 v6, 0x1

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 437
    invoke-virtual {v3}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v3

    invoke-direct {v8, v3}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v1, v2, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 438
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2

    .line 445
    :catch_aa
    move-exception v0

    .line 447
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.excludedDN"

    const/4 v6, 0x1

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 448
    invoke-virtual {v3}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v3

    invoke-direct {v8, v3}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v1, v2, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 449
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2

    .line 457
    :catch_cb
    move-exception v0

    .line 459
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.subjAltNameExtError"

    invoke-direct {v1, v2, v3}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 460
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2

    .line 474
    :catch_dd
    move-exception v0

    .line 476
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.notPermittedEmail"

    const/4 v5, 0x1

    new-array v5, v5, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v8, v6}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v5, v7

    invoke-direct {v1, v2, v3, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 478
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2
    :try_end_fa
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_8a .. :try_end_fa} :catch_7c

    .line 575
    :cond_fa
    :try_start_fa
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->NAME_CONSTRAINTS:Ljava/lang/String;

    invoke-static {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v0

    check-cast v0, Lorg/spongycastle/asn1/ASN1Sequence;
    :try_end_102
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_fa .. :try_end_102} :catch_123
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_fa .. :try_end_102} :catch_7c

    .line 583
    if-eqz v0, :cond_135

    .line 585
    :try_start_104
    invoke-static {v0}, Lorg/spongycastle/asn1/x509/NameConstraints;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/NameConstraints;

    move-result-object v0

    .line 590
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/NameConstraints;->getPermittedSubtrees()[Lorg/spongycastle/asn1/x509/GeneralSubtree;

    move-result-object v1

    .line 591
    if-eqz v1, :cond_111

    .line 593
    invoke-virtual {v5, v1}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->intersectPermittedSubtree([Lorg/spongycastle/asn1/x509/GeneralSubtree;)V

    .line 599
    :cond_111
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/NameConstraints;->getExcludedSubtrees()[Lorg/spongycastle/asn1/x509/GeneralSubtree;

    move-result-object v1

    .line 600
    if-eqz v1, :cond_135

    move v0, v2

    .line 602
    :goto_118
    array-length v3, v1

    if-eq v0, v3, :cond_135

    .line 604
    aget-object v3, v1, v0

    invoke-virtual {v5, v3}, Lorg/spongycastle/jce/provider/PKIXNameConstraintValidator;->addExcludedSubtree(Lorg/spongycastle/asn1/x509/GeneralSubtree;)V

    .line 602
    add-int/lit8 v0, v0, 0x1

    goto :goto_118

    .line 577
    :catch_123
    move-exception v0

    .line 579
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.ncExtError"

    invoke-direct {v1, v2, v3}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 580
    new-instance v2, Lorg/spongycastle/x509/CertPathReviewerException;

    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    invoke-direct {v2, v1, v0, v3, v4}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v2
    :try_end_135
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_104 .. :try_end_135} :catch_7c

    .line 401
    :cond_135
    add-int/lit8 v0, v4, -0x1

    move v4, v0

    goto/16 :goto_f
.end method

.method private checkPathLength()V
    .registers 10

    .prologue
    const/4 v4, 0x0

    .line 624
    iget v2, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    .line 630
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0}, Ljava/util/List;->size()I

    move-result v0

    add-int/lit8 v0, v0, -0x1

    move v3, v0

    move v1, v4

    :goto_d
    if-lez v3, :cond_5f

    .line 634
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0, v3}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v0

    check-cast v0, Ljava/security/cert/X509Certificate;

    .line 638
    invoke-static {v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z

    move-result v5

    if-nez v5, :cond_77

    .line 640
    if-gtz v2, :cond_2b

    .line 642
    new-instance v5, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v6, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.pathLengthExtended"

    invoke-direct {v5, v6, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 643
    invoke-virtual {p0, v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    .line 645
    :cond_2b
    add-int/lit8 v2, v2, -0x1

    .line 646
    add-int/lit8 v1, v1, 0x1

    move v8, v1

    move v1, v2

    move v2, v8

    .line 654
    :goto_32
    :try_start_32
    sget-object v5, Lorg/spongycastle/x509/PKIXCertPathReviewer;->BASIC_CONSTRAINTS:Ljava/lang/String;

    invoke-static {v0, v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v0

    invoke-static {v0}, Lorg/spongycastle/asn1/x509/BasicConstraints;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/BasicConstraints;
    :try_end_3b
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_32 .. :try_end_3b} :catch_50

    move-result-object v0

    .line 664
    :goto_3c
    if-eqz v0, :cond_75

    .line 666
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/BasicConstraints;->getPathLenConstraint()Ljava/math/BigInteger;

    move-result-object v0

    .line 668
    if-eqz v0, :cond_75

    .line 670
    invoke-virtual {v0}, Ljava/math/BigInteger;->intValue()I

    move-result v0

    .line 672
    if-ge v0, v1, :cond_75

    .line 630
    :goto_4a
    add-int/lit8 v1, v3, -0x1

    move v3, v1

    move v1, v2

    move v2, v0

    goto :goto_d

    .line 659
    :catch_50
    move-exception v0

    new-instance v0, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.processLengthConstError"

    invoke-direct {v0, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 660
    invoke-virtual {p0, v0, v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 661
    const/4 v0, 0x0

    goto :goto_3c

    .line 681
    :cond_5f
    new-instance v0, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.totalPathLength"

    const/4 v5, 0x1

    new-array v5, v5, [Ljava/lang/Object;

    .line 682
    invoke-static {v1}, Lorg/spongycastle/util/Integers;->valueOf(I)Ljava/lang/Integer;

    move-result-object v1

    aput-object v1, v5, v4

    invoke-direct {v0, v2, v3, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 684
    invoke-virtual {p0, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;)V

    .line 685
    return-void

    :cond_75
    move v0, v1

    goto :goto_4a

    :cond_77
    move v8, v1

    move v1, v2

    move v2, v8

    goto :goto_32
.end method

.method private checkPolicy()V
    .registers 24

    .prologue
    .line 1112
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v2}, Ljava/security/cert/PKIXParameters;->getInitialPolicies()Ljava/util/Set;

    move-result-object v19

    .line 1122
    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v2, v2, 0x1

    new-array v0, v2, [Ljava/util/ArrayList;

    move-object/from16 v20, v0

    .line 1123
    const/4 v2, 0x0

    :goto_13
    move-object/from16 v0, v20

    array-length v3, v0

    if-ge v2, v3, :cond_22

    .line 1125
    new-instance v3, Ljava/util/ArrayList;

    invoke-direct {v3}, Ljava/util/ArrayList;-><init>()V

    aput-object v3, v20, v2

    .line 1123
    add-int/lit8 v2, v2, 0x1

    goto :goto_13

    .line 1128
    :cond_22
    new-instance v5, Ljava/util/HashSet;

    invoke-direct {v5}, Ljava/util/HashSet;-><init>()V

    .line 1130
    const-string v2, "2.5.29.32.0"

    invoke-interface {v5, v2}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    .line 1132
    new-instance v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    new-instance v3, Ljava/util/ArrayList;

    invoke-direct {v3}, Ljava/util/ArrayList;-><init>()V

    const/4 v4, 0x0

    const/4 v6, 0x0

    new-instance v7, Ljava/util/HashSet;

    invoke-direct {v7}, Ljava/util/HashSet;-><init>()V

    const-string v8, "2.5.29.32.0"

    const/4 v9, 0x0

    invoke-direct/range {v2 .. v9}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;-><init>(Ljava/util/List;ILjava/util/Set;Ljava/security/cert/PolicyNode;Ljava/util/Set;Ljava/lang/String;Z)V

    .line 1135
    const/4 v3, 0x0

    aget-object v3, v20, v3

    invoke-interface {v3, v2}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    .line 1140
    move-object/from16 v0, p0

    iget-object v3, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v3}, Ljava/security/cert/PKIXParameters;->isExplicitPolicyRequired()Z

    move-result v3

    if-eqz v3, :cond_f1

    .line 1142
    const/4 v3, 0x0

    .line 1152
    :goto_51
    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v4}, Ljava/security/cert/PKIXParameters;->isAnyPolicyInhibited()Z

    move-result v4

    if-eqz v4, :cond_f9

    .line 1154
    const/4 v4, 0x0

    .line 1164
    :goto_5c
    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v5}, Ljava/security/cert/PKIXParameters;->isPolicyMappingInhibited()Z

    move-result v5

    if-eqz v5, :cond_101

    .line 1166
    const/4 v5, 0x0

    .line 1173
    :goto_67
    const/4 v7, 0x0

    .line 1179
    const/4 v10, 0x0

    .line 1185
    :try_start_69
    move-object/from16 v0, p0

    iget-object v6, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v6}, Ljava/util/List;->size()I

    move-result v6

    add-int/lit8 v6, v6, -0x1

    move/from16 v16, v6

    move v12, v5

    move v13, v4

    move v14, v3

    move-object v15, v2

    move-object v6, v7

    :goto_7a
    if-ltz v16, :cond_46a

    .line 1188
    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    sub-int v4, v2, v16

    .line 1191
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    move/from16 v0, v16

    invoke-interface {v2, v0}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    move-object v0, v2

    check-cast v0, Ljava/security/cert/X509Certificate;

    move-object v10, v0
    :try_end_90
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_69 .. :try_end_90} :catch_e2

    .line 1198
    :try_start_90
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CERTIFICATE_POLICIES:Ljava/lang/String;

    invoke-static {v10, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    move-object v0, v2

    check-cast v0, Lorg/spongycastle/asn1/ASN1Sequence;

    move-object v11, v0
    :try_end_9a
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_90 .. :try_end_9a} :catch_109
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_90 .. :try_end_9a} :catch_e2

    .line 1206
    if-eqz v11, :cond_280

    if-eqz v15, :cond_280

    .line 1211
    :try_start_9e
    invoke-virtual {v11}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjects()Ljava/util/Enumeration;

    move-result-object v3

    .line 1212
    new-instance v2, Ljava/util/HashSet;

    invoke-direct {v2}, Ljava/util/HashSet;-><init>()V

    .line 1214
    :cond_a7
    :goto_a7
    invoke-interface {v3}, Ljava/util/Enumeration;->hasMoreElements()Z

    move-result v5

    if-eqz v5, :cond_135

    .line 1216
    invoke-interface {v3}, Ljava/util/Enumeration;->nextElement()Ljava/lang/Object;

    move-result-object v5

    invoke-static {v5}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/PolicyInformation;

    move-result-object v5

    .line 1217
    invoke-virtual {v5}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getPolicyIdentifier()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v7

    .line 1219
    invoke-virtual {v7}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v8

    invoke-interface {v2, v8}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    .line 1221
    const-string v8, "2.5.29.32.0"

    invoke-virtual {v7}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v9

    invoke-virtual {v8, v9}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z
    :try_end_c9
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_9e .. :try_end_c9} :catch_e2

    move-result v8

    if-nez v8, :cond_a7

    .line 1226
    :try_start_cc
    invoke-virtual {v5}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getPolicyQualifiers()Lorg/spongycastle/asn1/ASN1Sequence;

    move-result-object v5

    invoke-static {v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getQualifierSet(Lorg/spongycastle/asn1/ASN1Sequence;)Ljava/util/Set;
    :try_end_d3
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_cc .. :try_end_d3} :catch_11f
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_cc .. :try_end_d3} :catch_e2

    move-result-object v5

    .line 1234
    :try_start_d4
    move-object/from16 v0, v20

    invoke-static {v4, v0, v7, v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->processCertD1i(I[Ljava/util/List;Lorg/spongycastle/asn1/ASN1ObjectIdentifier;Ljava/util/Set;)Z

    move-result v8

    .line 1236
    if-nez v8, :cond_a7

    .line 1238
    move-object/from16 v0, v20

    invoke-static {v4, v0, v7, v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->processCertD1ii(I[Ljava/util/List;Lorg/spongycastle/asn1/ASN1ObjectIdentifier;Ljava/util/Set;)V
    :try_end_e1
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_d4 .. :try_end_e1} :catch_e2

    goto :goto_a7

    .line 1818
    :catch_e2
    move-exception v2

    .line 1820
    invoke-virtual {v2}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v3

    invoke-virtual {v2}, Lorg/spongycastle/x509/CertPathReviewerException;->getIndex()I

    move-result v2

    move-object/from16 v0, p0

    invoke-virtual {v0, v3, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1823
    :cond_f0
    return-void

    .line 1146
    :cond_f1
    move-object/from16 v0, p0

    iget v3, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v3, v3, 0x1

    goto/16 :goto_51

    .line 1158
    :cond_f9
    move-object/from16 v0, p0

    iget v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v4, v4, 0x1

    goto/16 :goto_5c

    .line 1170
    :cond_101
    move-object/from16 v0, p0

    iget v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v5, v5, 0x1

    goto/16 :goto_67

    .line 1201
    :catch_109
    move-exception v2

    .line 1203
    :try_start_10a
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1204
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1228
    :catch_11f
    move-exception v2

    .line 1230
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyQualifierError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1231
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1243
    :cond_135
    if-eqz v6, :cond_13f

    const-string v3, "2.5.29.32.0"

    invoke-interface {v6, v3}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    move-result v3

    if-eqz v3, :cond_1c9

    :cond_13f
    move-object/from16 v17, v2

    .line 1267
    :cond_141
    if-gtz v13, :cond_14f

    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    if-ge v4, v2, :cond_22e

    invoke-static {v10}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z

    move-result v2

    if-eqz v2, :cond_22e

    .line 1269
    :cond_14f
    invoke-virtual {v11}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjects()Ljava/util/Enumeration;

    move-result-object v2

    .line 1271
    :cond_153
    invoke-interface {v2}, Ljava/util/Enumeration;->hasMoreElements()Z

    move-result v3

    if-eqz v3, :cond_22e

    .line 1273
    invoke-interface {v2}, Ljava/util/Enumeration;->nextElement()Ljava/lang/Object;

    move-result-object v3

    invoke-static {v3}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/PolicyInformation;

    move-result-object v3

    .line 1275
    const-string v5, "2.5.29.32.0"

    invoke-virtual {v3}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getPolicyIdentifier()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v6

    invoke-virtual {v6}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v6

    invoke-virtual {v5, v6}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z
    :try_end_16e
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_10a .. :try_end_16e} :catch_e2

    move-result v5

    if-eqz v5, :cond_153

    .line 1280
    :try_start_171
    invoke-virtual {v3}, Lorg/spongycastle/asn1/x509/PolicyInformation;->getPolicyQualifiers()Lorg/spongycastle/asn1/ASN1Sequence;

    move-result-object v2

    invoke-static {v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getQualifierSet(Lorg/spongycastle/asn1/ASN1Sequence;)Ljava/util/Set;
    :try_end_178
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_171 .. :try_end_178} :catch_1e8
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_171 .. :try_end_178} :catch_e2

    move-result-object v7

    .line 1287
    add-int/lit8 v2, v4, -0x1

    :try_start_17b
    aget-object v21, v20, v2

    .line 1289
    const/4 v2, 0x0

    move/from16 v18, v2

    :goto_180
    invoke-interface/range {v21 .. v21}, Ljava/util/List;->size()I

    move-result v2

    move/from16 v0, v18

    if-ge v0, v2, :cond_22e

    .line 1291
    move-object/from16 v0, v21

    move/from16 v1, v18

    invoke-interface {v0, v1}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v6

    check-cast v6, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1293
    invoke-virtual {v6}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getExpectedPolicies()Ljava/util/Set;

    move-result-object v2

    invoke-interface {v2}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v22

    .line 1294
    :cond_19a
    :goto_19a
    invoke-interface/range {v22 .. v22}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_228

    .line 1296
    invoke-interface/range {v22 .. v22}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    .line 1299
    instance-of v3, v2, Ljava/lang/String;

    if-eqz v3, :cond_1fe

    .line 1301
    check-cast v2, Ljava/lang/String;

    move-object v8, v2

    .line 1312
    :goto_1ab
    const/4 v3, 0x0

    .line 1314
    invoke-virtual {v6}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getChildren()Ljava/util/Iterator;

    move-result-object v5

    .line 1316
    :goto_1b0
    invoke-interface {v5}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_209

    .line 1318
    invoke-interface {v5}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1320
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v2

    invoke-virtual {v8, v2}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v2

    if-eqz v2, :cond_687

    .line 1322
    const/4 v2, 0x1

    :goto_1c7
    move v3, v2

    .line 1324
    goto :goto_1b0

    .line 1249
    :cond_1c9
    invoke-interface {v6}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v3

    .line 1250
    new-instance v17, Ljava/util/HashSet;

    invoke-direct/range {v17 .. v17}, Ljava/util/HashSet;-><init>()V

    .line 1252
    :cond_1d2
    :goto_1d2
    invoke-interface {v3}, Ljava/util/Iterator;->hasNext()Z

    move-result v5

    if-eqz v5, :cond_141

    .line 1254
    invoke-interface {v3}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v5

    .line 1256
    invoke-interface {v2, v5}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    move-result v6

    if-eqz v6, :cond_1d2

    .line 1258
    move-object/from16 v0, v17

    invoke-interface {v0, v5}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    goto :goto_1d2

    .line 1282
    :catch_1e8
    move-exception v2

    .line 1284
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyQualifierError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1285
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1303
    :cond_1fe
    instance-of v3, v2, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    if-eqz v3, :cond_19a

    .line 1305
    check-cast v2, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v8

    goto :goto_1ab

    .line 1326
    :cond_209
    if-nez v3, :cond_19a

    .line 1328
    new-instance v5, Ljava/util/HashSet;

    invoke-direct {v5}, Ljava/util/HashSet;-><init>()V

    .line 1329
    invoke-interface {v5, v8}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    .line 1331
    new-instance v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    new-instance v3, Ljava/util/ArrayList;

    invoke-direct {v3}, Ljava/util/ArrayList;-><init>()V

    const/4 v9, 0x0

    invoke-direct/range {v2 .. v9}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;-><init>(Ljava/util/List;ILjava/util/Set;Ljava/security/cert/PolicyNode;Ljava/util/Set;Ljava/lang/String;Z)V

    .line 1335
    invoke-virtual {v6, v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->addChild(Lorg/spongycastle/jce/provider/PKIXPolicyNode;)V

    .line 1336
    aget-object v3, v20, v4

    invoke-interface {v3, v2}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    goto/16 :goto_19a

    .line 1289
    :cond_228
    add-int/lit8 v2, v18, 0x1

    move/from16 v18, v2

    goto/16 :goto_180

    .line 1348
    :cond_22e
    add-int/lit8 v2, v4, -0x1

    move v6, v2

    :goto_231
    if-ltz v6, :cond_25d

    .line 1350
    aget-object v7, v20, v6

    .line 1352
    const/4 v2, 0x0

    move v5, v2

    move-object v3, v15

    :goto_238
    invoke-interface {v7}, Ljava/util/List;->size()I

    move-result v2

    if-ge v5, v2, :cond_257

    .line 1354
    invoke-interface {v7, v5}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1355
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->hasChildren()Z

    move-result v8

    if-nez v8, :cond_684

    .line 1357
    move-object/from16 v0, v20

    invoke-static {v3, v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->removePolicyNode(Lorg/spongycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/spongycastle/jce/provider/PKIXPolicyNode;)Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    move-result-object v2

    .line 1359
    if-eqz v2, :cond_258

    .line 1352
    :goto_252
    add-int/lit8 v3, v5, 0x1

    move v5, v3

    move-object v3, v2

    goto :goto_238

    :cond_257
    move-object v2, v3

    .line 1348
    :cond_258
    add-int/lit8 v3, v6, -0x1

    move v6, v3

    move-object v15, v2

    goto :goto_231

    .line 1370
    :cond_25d
    invoke-virtual {v10}, Ljava/security/cert/X509Certificate;->getCriticalExtensionOIDs()Ljava/util/Set;

    move-result-object v2

    .line 1372
    if-eqz v2, :cond_67f

    .line 1374
    sget-object v3, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CERTIFICATE_POLICIES:Ljava/lang/String;

    invoke-interface {v2, v3}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    move-result v5

    .line 1376
    aget-object v6, v20, v4

    .line 1377
    const/4 v2, 0x0

    move v3, v2

    :goto_26d
    invoke-interface {v6}, Ljava/util/List;->size()I

    move-result v2

    if-ge v3, v2, :cond_67f

    .line 1379
    invoke-interface {v6, v3}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1380
    invoke-virtual {v2, v5}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->setCritical(Z)V

    .line 1377
    add-int/lit8 v2, v3, 0x1

    move v3, v2

    goto :goto_26d

    :cond_280
    move-object v8, v6

    move-object v7, v15

    .line 1388
    :goto_282
    if-nez v11, :cond_285

    .line 1390
    const/4 v7, 0x0

    .line 1395
    :cond_285
    if-gtz v14, :cond_298

    if-nez v7, :cond_298

    .line 1397
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noValidPolicyTree"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1398
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 1405
    :cond_298
    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I
    :try_end_29c
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_17b .. :try_end_29c} :catch_e2

    if-eq v4, v2, :cond_679

    .line 1413
    :try_start_29e
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->POLICY_MAPPINGS:Ljava/lang/String;

    invoke-static {v10, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;
    :try_end_2a3
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_29e .. :try_end_2a3} :catch_2e7
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_29e .. :try_end_2a3} :catch_e2

    move-result-object v3

    .line 1421
    if-eqz v3, :cond_322

    .line 1423
    :try_start_2a6
    move-object v0, v3

    check-cast v0, Lorg/spongycastle/asn1/ASN1Sequence;

    move-object v2, v0

    .line 1424
    const/4 v5, 0x0

    move v9, v5

    :goto_2ac
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Sequence;->size()I

    move-result v5

    if-ge v9, v5, :cond_322

    .line 1426
    invoke-virtual {v2, v9}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v5

    check-cast v5, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1427
    const/4 v6, 0x0

    invoke-virtual {v5, v6}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v6

    check-cast v6, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    .line 1428
    const/4 v11, 0x1

    invoke-virtual {v5, v11}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v5

    check-cast v5, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    .line 1429
    const-string v11, "2.5.29.32.0"

    invoke-virtual {v6}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v6

    invoke-virtual {v11, v6}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v6

    if-eqz v6, :cond_2fd

    .line 1431
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.invalidPolicyMapping"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1432
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1415
    :catch_2e7
    move-exception v2

    .line 1417
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyMapExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1418
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1434
    :cond_2fd
    const-string v6, "2.5.29.32.0"

    invoke-virtual {v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v5

    invoke-virtual {v6, v5}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v5

    if-eqz v5, :cond_31e

    .line 1436
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.invalidPolicyMapping"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1437
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1424
    :cond_31e
    add-int/lit8 v5, v9, 0x1

    move v9, v5

    goto :goto_2ac

    .line 1444
    :cond_322
    if-eqz v3, :cond_676

    .line 1446
    check-cast v3, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1447
    new-instance v9, Ljava/util/HashMap;

    invoke-direct {v9}, Ljava/util/HashMap;-><init>()V

    .line 1448
    new-instance v11, Ljava/util/HashSet;

    invoke-direct {v11}, Ljava/util/HashSet;-><init>()V

    .line 1450
    const/4 v2, 0x0

    move v6, v2

    :goto_332
    invoke-virtual {v3}, Lorg/spongycastle/asn1/ASN1Sequence;->size()I

    move-result v2

    if-ge v6, v2, :cond_376

    .line 1452
    invoke-virtual {v3, v6}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1453
    const/4 v5, 0x0

    invoke-virtual {v2, v5}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v5

    check-cast v5, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v5

    .line 1454
    const/4 v15, 0x1

    invoke-virtual {v2, v15}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v15

    .line 1457
    invoke-interface {v9, v5}, Ljava/util/Map;->containsKey(Ljava/lang/Object;)Z

    move-result v2

    if-nez v2, :cond_36c

    .line 1459
    new-instance v2, Ljava/util/HashSet;

    invoke-direct {v2}, Ljava/util/HashSet;-><init>()V

    .line 1460
    invoke-interface {v2, v15}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    .line 1461
    invoke-interface {v9, v5, v2}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;

    .line 1462
    invoke-interface {v11, v5}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    .line 1450
    :goto_368
    add-int/lit8 v2, v6, 0x1

    move v6, v2

    goto :goto_332

    .line 1466
    :cond_36c
    invoke-interface {v9, v5}, Ljava/util/Map;->get(Ljava/lang/Object;)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/util/Set;

    .line 1467
    invoke-interface {v2, v15}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    goto :goto_368

    .line 1471
    :cond_376
    invoke-interface {v11}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v5

    move-object v3, v7

    .line 1472
    :goto_37b
    invoke-interface {v5}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_3c5

    .line 1474
    invoke-interface {v5}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/lang/String;
    :try_end_387
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_2a6 .. :try_end_387} :catch_e2

    .line 1479
    if-lez v12, :cond_3bb

    .line 1483
    :try_start_389
    move-object/from16 v0, v20

    invoke-static {v4, v0, v2, v9, v10}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->prepareNextCertB1(I[Ljava/util/List;Ljava/lang/String;Ljava/util/Map;Ljava/security/cert/X509Certificate;)V
    :try_end_38e
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_389 .. :try_end_38e} :catch_38f
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_389 .. :try_end_38e} :catch_3a5
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_389 .. :try_end_38e} :catch_e2

    goto :goto_37b

    .line 1485
    :catch_38f
    move-exception v2

    .line 1488
    :try_start_390
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1489
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1491
    :catch_3a5
    move-exception v2

    .line 1494
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.policyQualifierError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1495
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v4, v3, v2, v5, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;Ljava/security/cert/CertPath;I)V

    throw v4

    .line 1502
    :cond_3bb
    if-gtz v12, :cond_673

    .line 1504
    move-object/from16 v0, v20

    invoke-static {v4, v0, v2, v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->prepareNextCertB2(I[Ljava/util/List;Ljava/lang/String;Lorg/spongycastle/jce/provider/PKIXPolicyNode;)Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    move-result-object v2

    :goto_3c3
    move-object v3, v2

    .line 1507
    goto :goto_37b

    :cond_3c5
    move-object v6, v3

    .line 1514
    :goto_3c6
    invoke-static {v10}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z
    :try_end_3c9
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_390 .. :try_end_3c9} :catch_e2

    move-result v2

    if-nez v2, :cond_66e

    .line 1518
    if-eqz v14, :cond_66b

    .line 1520
    add-int/lit8 v4, v14, -0x1

    .line 1524
    :goto_3d0
    if-eqz v12, :cond_668

    .line 1526
    add-int/lit8 v3, v12, -0x1

    .line 1530
    :goto_3d4
    if-eqz v13, :cond_665

    .line 1532
    add-int/lit8 v13, v13, -0x1

    move v5, v13

    .line 1543
    :goto_3d9
    :try_start_3d9
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->POLICY_CONSTRAINTS:Ljava/lang/String;

    invoke-static {v10, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1544
    if-eqz v2, :cond_434

    .line 1546
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjects()Ljava/util/Enumeration;

    move-result-object v7

    .line 1548
    :goto_3e7
    invoke-interface {v7}, Ljava/util/Enumeration;->hasMoreElements()Z

    move-result v2

    if-eqz v2, :cond_434

    .line 1550
    invoke-interface {v7}, Ljava/util/Enumeration;->nextElement()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1TaggedObject;

    .line 1553
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1TaggedObject;->getTagNo()I

    move-result v9

    packed-switch v9, :pswitch_data_68a

    :cond_3fa
    move v2, v3

    :goto_3fb
    move v3, v2

    .line 1570
    goto :goto_3e7

    .line 1556
    :pswitch_3fd
    const/4 v9, 0x0

    invoke-static {v2, v9}, Lorg/spongycastle/asn1/ASN1Integer;->getInstance(Lorg/spongycastle/asn1/ASN1TaggedObject;Z)Lorg/spongycastle/asn1/ASN1Integer;

    move-result-object v2

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getValue()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->intValue()I

    move-result v2

    .line 1557
    if-ge v2, v4, :cond_3fa

    move v4, v2

    .line 1559
    goto :goto_3e7

    .line 1563
    :pswitch_40e
    const/4 v9, 0x0

    invoke-static {v2, v9}, Lorg/spongycastle/asn1/ASN1Integer;->getInstance(Lorg/spongycastle/asn1/ASN1TaggedObject;Z)Lorg/spongycastle/asn1/ASN1Integer;

    move-result-object v2

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getValue()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->intValue()I
    :try_end_41a
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_3d9 .. :try_end_41a} :catch_41e
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_3d9 .. :try_end_41a} :catch_e2

    move-result v2

    .line 1564
    if-ge v2, v3, :cond_3fa

    goto :goto_3fb

    .line 1575
    :catch_41e
    move-exception v2

    :try_start_41f
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.policyConstExtError"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1576
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3
    :try_end_434
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_41f .. :try_end_434} :catch_e2

    .line 1585
    :cond_434
    :try_start_434
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->INHIBIT_ANY_POLICY:Ljava/lang/String;

    invoke-static {v10, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1Integer;

    .line 1587
    if-eqz v2, :cond_662

    .line 1589
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getValue()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->intValue()I
    :try_end_445
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_434 .. :try_end_445} :catch_454
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_434 .. :try_end_445} :catch_e2

    move-result v2

    .line 1591
    if-ge v2, v5, :cond_662

    :goto_448
    move-object v5, v6

    .line 1185
    :goto_449
    add-int/lit8 v6, v16, -0x1

    move/from16 v16, v6

    move v12, v3

    move v13, v2

    move v14, v4

    move-object v15, v5

    move-object v6, v8

    goto/16 :goto_7a

    .line 1599
    :catch_454
    move-exception v2

    :try_start_455
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.policyInhibitExtError"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1600
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1614
    :cond_46a
    invoke-static {v10}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z
    :try_end_46d
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_455 .. :try_end_46d} :catch_e2

    move-result v2

    if-nez v2, :cond_65f

    if-lez v14, :cond_65f

    .line 1616
    add-int/lit8 v14, v14, -0x1

    move v3, v14

    .line 1625
    :goto_475
    :try_start_475
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->POLICY_CONSTRAINTS:Ljava/lang/String;

    invoke-static {v10, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1626
    if-eqz v2, :cond_4c0

    .line 1628
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjects()Ljava/util/Enumeration;

    move-result-object v4

    .line 1630
    :goto_483
    invoke-interface {v4}, Ljava/util/Enumeration;->hasMoreElements()Z

    move-result v2

    if-eqz v2, :cond_4c0

    .line 1632
    invoke-interface {v4}, Ljava/util/Enumeration;->nextElement()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1TaggedObject;

    .line 1633
    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1TaggedObject;->getTagNo()I

    move-result v5

    packed-switch v5, :pswitch_data_692

    :cond_496
    move v2, v3

    :goto_497
    move v3, v2

    .line 1643
    goto :goto_483

    .line 1636
    :pswitch_499
    const/4 v5, 0x0

    invoke-static {v2, v5}, Lorg/spongycastle/asn1/ASN1Integer;->getInstance(Lorg/spongycastle/asn1/ASN1TaggedObject;Z)Lorg/spongycastle/asn1/ASN1Integer;

    move-result-object v2

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getValue()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->intValue()I
    :try_end_4a5
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_475 .. :try_end_4a5} :catch_4aa
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_475 .. :try_end_4a5} :catch_e2

    move-result v2

    .line 1637
    if-nez v2, :cond_496

    .line 1639
    const/4 v2, 0x0

    goto :goto_497

    .line 1648
    :catch_4aa
    move-exception v2

    :try_start_4ab
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.policyConstExtError"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1649
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1662
    :cond_4c0
    if-nez v15, :cond_4f5

    .line 1664
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v2}, Ljava/security/cert/PKIXParameters;->isExplicitPolicyRequired()Z

    move-result v2

    if-eqz v2, :cond_4e1

    .line 1666
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.explicitPolicy"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1667
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1669
    :cond_4e1
    const/4 v2, 0x0

    .line 1810
    :cond_4e2
    :goto_4e2
    if-gtz v3, :cond_f0

    if-nez v2, :cond_f0

    .line 1812
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.invalidPolicy"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1813
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 1671
    :cond_4f5
    invoke-static/range {v19 .. v19}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isAnyPolicy(Ljava/util/Set;)Z

    move-result v2

    if-eqz v2, :cond_5ad

    .line 1673
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v2}, Ljava/security/cert/PKIXParameters;->isExplicitPolicyRequired()Z

    move-result v2

    if-eqz v2, :cond_65c

    .line 1675
    invoke-interface {v6}, Ljava/util/Set;->isEmpty()Z

    move-result v2

    if-eqz v2, :cond_520

    .line 1677
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.explicitPolicy"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1678
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    move/from16 v0, v16

    invoke-direct {v3, v2, v4, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/security/cert/CertPath;I)V

    throw v3

    .line 1682
    :cond_520
    new-instance v7, Ljava/util/HashSet;

    invoke-direct {v7}, Ljava/util/HashSet;-><init>()V

    .line 1684
    const/4 v2, 0x0

    move v5, v2

    :goto_527
    move-object/from16 v0, v20

    array-length v2, v0

    if-ge v5, v2, :cond_562

    .line 1686
    aget-object v8, v20, v5

    .line 1688
    const/4 v2, 0x0

    move v4, v2

    :goto_530
    invoke-interface {v8}, Ljava/util/List;->size()I

    move-result v2

    if-ge v4, v2, :cond_55e

    .line 1690
    invoke-interface {v8, v4}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1692
    const-string v9, "2.5.29.32.0"

    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v10

    invoke-virtual {v9, v10}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v9

    if-eqz v9, :cond_55a

    .line 1694
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getChildren()Ljava/util/Iterator;

    move-result-object v2

    .line 1695
    :goto_54c
    invoke-interface {v2}, Ljava/util/Iterator;->hasNext()Z

    move-result v9

    if-eqz v9, :cond_55a

    .line 1697
    invoke-interface {v2}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v9

    invoke-interface {v7, v9}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    goto :goto_54c

    .line 1688
    :cond_55a
    add-int/lit8 v2, v4, 0x1

    move v4, v2

    goto :goto_530

    .line 1684
    :cond_55e
    add-int/lit8 v2, v5, 0x1

    move v5, v2

    goto :goto_527

    .line 1703
    :cond_562
    invoke-interface {v7}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v4

    .line 1704
    :goto_566
    invoke-interface {v4}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_57a

    .line 1706
    invoke-interface {v4}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1707
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v2

    .line 1709
    invoke-interface {v6, v2}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    goto :goto_566

    .line 1714
    :cond_57a
    if-eqz v15, :cond_65c

    .line 1716
    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v2, v2, -0x1

    move v6, v2

    move-object v2, v15

    :goto_584
    if-ltz v6, :cond_4e2

    .line 1718
    aget-object v7, v20, v6

    .line 1720
    const/4 v4, 0x0

    move v5, v4

    move-object v4, v2

    :goto_58b
    invoke-interface {v7}, Ljava/util/List;->size()I

    move-result v2

    if-ge v5, v2, :cond_5a8

    .line 1722
    invoke-interface {v7, v5}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1723
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->hasChildren()Z

    move-result v8

    if-nez v8, :cond_659

    .line 1725
    move-object/from16 v0, v20

    invoke-static {v4, v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->removePolicyNode(Lorg/spongycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/spongycastle/jce/provider/PKIXPolicyNode;)Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    move-result-object v2

    .line 1720
    :goto_5a3
    add-int/lit8 v4, v5, 0x1

    move v5, v4

    move-object v4, v2

    goto :goto_58b

    .line 1716
    :cond_5a8
    add-int/lit8 v2, v6, -0x1

    move v6, v2

    move-object v2, v4

    goto :goto_584

    .line 1747
    :cond_5ad
    new-instance v6, Ljava/util/HashSet;

    invoke-direct {v6}, Ljava/util/HashSet;-><init>()V

    .line 1749
    const/4 v2, 0x0

    move v5, v2

    :goto_5b4
    move-object/from16 v0, v20

    array-length v2, v0

    if-ge v5, v2, :cond_5fd

    .line 1751
    aget-object v7, v20, v5

    .line 1753
    const/4 v2, 0x0

    move v4, v2

    :goto_5bd
    invoke-interface {v7}, Ljava/util/List;->size()I

    move-result v2

    if-ge v4, v2, :cond_5f9

    .line 1755
    invoke-interface {v7, v4}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1757
    const-string v8, "2.5.29.32.0"

    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v9

    invoke-virtual {v8, v9}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v8

    if-eqz v8, :cond_5f5

    .line 1759
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getChildren()Ljava/util/Iterator;

    move-result-object v8

    .line 1760
    :cond_5d9
    :goto_5d9
    invoke-interface {v8}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_5f5

    .line 1762
    invoke-interface {v8}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1763
    const-string v9, "2.5.29.32.0"

    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v10

    invoke-virtual {v9, v10}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v9

    if-nez v9, :cond_5d9

    .line 1765
    invoke-interface {v6, v2}, Ljava/util/Set;->add(Ljava/lang/Object;)Z

    goto :goto_5d9

    .line 1753
    :cond_5f5
    add-int/lit8 v2, v4, 0x1

    move v4, v2

    goto :goto_5bd

    .line 1749
    :cond_5f9
    add-int/lit8 v2, v5, 0x1

    move v5, v2

    goto :goto_5b4

    .line 1775
    :cond_5fd
    invoke-interface {v6}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v5

    move-object v4, v15

    .line 1776
    :goto_602
    invoke-interface {v5}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_622

    .line 1778
    invoke-interface {v5}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1779
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->getValidPolicy()Ljava/lang/String;

    move-result-object v6

    .line 1781
    move-object/from16 v0, v19

    invoke-interface {v0, v6}, Ljava/util/Set;->contains(Ljava/lang/Object;)Z

    move-result v6

    if-nez v6, :cond_657

    .line 1783
    move-object/from16 v0, v20

    invoke-static {v4, v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->removePolicyNode(Lorg/spongycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/spongycastle/jce/provider/PKIXPolicyNode;)Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    move-result-object v2

    :goto_620
    move-object v4, v2

    .line 1785
    goto :goto_602

    .line 1790
    :cond_622
    if-eqz v4, :cond_652

    .line 1792
    move-object/from16 v0, p0

    iget v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v2, v2, -0x1

    move v6, v2

    :goto_62b
    if-ltz v6, :cond_652

    .line 1794
    aget-object v7, v20, v6

    .line 1796
    const/4 v2, 0x0

    move v5, v2

    :goto_631
    invoke-interface {v7}, Ljava/util/List;->size()I

    move-result v2

    if-ge v5, v2, :cond_64e

    .line 1798
    invoke-interface {v7, v5}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/jce/provider/PKIXPolicyNode;

    .line 1799
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/PKIXPolicyNode;->hasChildren()Z

    move-result v8

    if-nez v8, :cond_655

    .line 1801
    move-object/from16 v0, v20

    invoke-static {v4, v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->removePolicyNode(Lorg/spongycastle/jce/provider/PKIXPolicyNode;[Ljava/util/List;Lorg/spongycastle/jce/provider/PKIXPolicyNode;)Lorg/spongycastle/jce/provider/PKIXPolicyNode;
    :try_end_648
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_4ab .. :try_end_648} :catch_e2

    move-result-object v2

    .line 1796
    :goto_649
    add-int/lit8 v4, v5, 0x1

    move v5, v4

    move-object v4, v2

    goto :goto_631

    .line 1792
    :cond_64e
    add-int/lit8 v2, v6, -0x1

    move v6, v2

    goto :goto_62b

    :cond_652
    move-object v2, v4

    .line 1807
    goto/16 :goto_4e2

    :cond_655
    move-object v2, v4

    goto :goto_649

    :cond_657
    move-object v2, v4

    goto :goto_620

    :cond_659
    move-object v2, v4

    goto/16 :goto_5a3

    :cond_65c
    move-object v2, v15

    goto/16 :goto_4e2

    :cond_65f
    move v3, v14

    goto/16 :goto_475

    :cond_662
    move v2, v5

    goto/16 :goto_448

    :cond_665
    move v5, v13

    goto/16 :goto_3d9

    :cond_668
    move v3, v12

    goto/16 :goto_3d4

    :cond_66b
    move v4, v14

    goto/16 :goto_3d0

    :cond_66e
    move v3, v12

    move v5, v13

    move v4, v14

    goto/16 :goto_3d9

    :cond_673
    move-object v2, v3

    goto/16 :goto_3c3

    :cond_676
    move-object v6, v7

    goto/16 :goto_3c6

    :cond_679
    move v3, v12

    move v2, v13

    move v4, v14

    move-object v5, v7

    goto/16 :goto_449

    :cond_67f
    move-object/from16 v8, v17

    move-object v7, v15

    goto/16 :goto_282

    :cond_684
    move-object v2, v3

    goto/16 :goto_252

    :cond_687
    move v2, v3

    goto/16 :goto_1c7

    .line 1553
    :pswitch_data_68a
    .packed-switch 0x0
        :pswitch_3fd
        :pswitch_40e
    .end packed-switch

    .line 1633
    :pswitch_data_692
    .packed-switch 0x0
        :pswitch_499
    .end packed-switch
.end method

.method private checkSignatures()V
    .registers 19

    .prologue
    .line 697
    const/4 v3, 0x0

    .line 698
    const/4 v4, 0x0

    .line 702
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.certPathValidDate"

    const/4 v6, 0x2

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/TrustedInput;

    move-object/from16 v0, p0

    iget-object v9, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->validDate:Ljava/util/Date;

    invoke-direct {v8, v9}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    const/4 v7, 0x1

    new-instance v8, Lorg/spongycastle/i18n/filter/TrustedInput;

    new-instance v9, Ljava/util/Date;

    invoke-direct {v9}, Ljava/util/Date;-><init>()V

    invoke-direct {v8, v9}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v1, v2, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 704
    move-object/from16 v0, p0

    invoke-virtual {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;)V

    .line 710
    :try_start_2c
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v2}, Ljava/util/List;->size()I

    move-result v2

    add-int/lit8 v2, v2, -0x1

    invoke-interface {v1, v2}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v1

    check-cast v1, Ljava/security/cert/X509Certificate;

    .line 711
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v2}, Ljava/security/cert/PKIXParameters;->getTrustAnchors()Ljava/util/Set;

    move-result-object v2

    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getTrustAnchors(Ljava/security/cert/X509Certificate;Ljava/util/Set;)Ljava/util/Collection;

    move-result-object v2

    .line 712
    invoke-interface {v2}, Ljava/util/Collection;->size()I

    move-result v5

    const/4 v6, 0x1

    if-le v5, v6, :cond_148

    .line 715
    new-instance v5, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v6, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.conflictingTrustAnchors"

    const/4 v8, 0x2

    new-array v8, v8, [Ljava/lang/Object;

    const/4 v9, 0x0

    .line 717
    invoke-interface {v2}, Ljava/util/Collection;->size()I

    move-result v2

    invoke-static {v2}, Lorg/spongycastle/util/Integers;->valueOf(I)Ljava/lang/Integer;

    move-result-object v2

    aput-object v2, v8, v9

    const/4 v2, 0x1

    new-instance v9, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 718
    invoke-virtual {v1}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v1

    invoke-direct {v9, v1}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v8, v2

    invoke-direct {v5, v6, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 719
    move-object/from16 v0, p0

    invoke-virtual {v0, v5}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V
    :try_end_7d
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_2c .. :try_end_7d} :catch_1c2
    .catch Ljava/lang/Throwable; {:try_start_2c .. :try_end_7d} :catch_1d0

    move-object v11, v3

    .line 769
    :goto_7e
    if-eqz v11, :cond_4a7

    .line 772
    invoke-virtual {v11}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v1

    .line 775
    if-eqz v1, :cond_1f9

    .line 777
    :try_start_86
    invoke-static {v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getSubjectPrincipal(Ljava/security/cert/X509Certificate;)Ljavax/security/auth/x500/X500Principal;
    :try_end_89
    .catch Ljava/lang/IllegalArgumentException; {:try_start_86 .. :try_end_89} :catch_204

    move-result-object v3

    .line 792
    :goto_8a
    if-eqz v1, :cond_a5

    .line 794
    invoke-virtual {v1}, Ljava/security/cert/X509Certificate;->getKeyUsage()[Z

    move-result-object v1

    .line 795
    if-eqz v1, :cond_a5

    const/4 v2, 0x5

    aget-boolean v1, v1, v2

    if-nez v1, :cond_a5

    .line 797
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.trustKeyUsage"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 798
    move-object/from16 v0, p0

    invoke-virtual {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;)V

    .line 805
    :cond_a5
    :goto_a5
    const/4 v2, 0x0

    .line 808
    const/4 v1, 0x0

    .line 814
    if-eqz v11, :cond_bd

    .line 816
    invoke-virtual {v11}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v1

    .line 818
    if-eqz v1, :cond_225

    .line 820
    invoke-virtual {v1}, Ljava/security/cert/X509Certificate;->getPublicKey()Ljava/security/PublicKey;

    move-result-object v2

    .line 829
    :goto_b3
    :try_start_b3
    invoke-static {v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getAlgorithmIdentifier(Ljava/security/PublicKey;)Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;

    move-result-object v4

    .line 830
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;->getAlgorithm()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    .line 831
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;->getParameters()Lorg/spongycastle/asn1/ASN1Encodable;
    :try_end_bd
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_b3 .. :try_end_bd} :catch_22b

    .line 847
    :cond_bd
    :goto_bd
    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v4}, Ljava/util/List;->size()I

    move-result v4

    add-int/lit8 v9, v4, -0x1

    move-object v5, v1

    move-object v10, v3

    move-object v6, v2

    :goto_ca
    if-ltz v9, :cond_492

    .line 852
    move-object/from16 v0, p0

    iget v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    sub-int v12, v1, v9

    .line 860
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v1, v9}, Ljava/util/List;->get(I)Ljava/lang/Object;

    move-result-object v3

    check-cast v3, Ljava/security/cert/X509Certificate;

    .line 863
    if-eqz v6, :cond_265

    .line 867
    :try_start_de
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 868
    invoke-virtual {v1}, Ljava/security/cert/PKIXParameters;->getSigProvider()Ljava/lang/String;

    move-result-object v1

    .line 867
    invoke-static {v3, v6, v1}, Lorg/spongycastle/x509/CertPathValidatorUtilities;->verifyX509Certificate(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
    :try_end_e9
    .catch Ljava/security/GeneralSecurityException; {:try_start_de .. :try_end_e9} :catch_23c

    .line 928
    :goto_e9
    :try_start_e9
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->validDate:Ljava/util/Date;

    invoke-virtual {v3, v1}, Ljava/security/cert/X509Certificate;->checkValidity(Ljava/util/Date;)V
    :try_end_f0
    .catch Ljava/security/cert/CertificateNotYetValidException; {:try_start_e9 .. :try_end_f0} :catch_31d
    .catch Ljava/security/cert/CertificateExpiredException; {:try_start_e9 .. :try_end_f0} :catch_33d

    .line 944
    :goto_f0
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v1}, Ljava/security/cert/PKIXParameters;->isRevocationEnabled()Z

    move-result v1

    if-eqz v1, :cond_3b4

    .line 947
    const/4 v1, 0x0

    .line 950
    :try_start_fb
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_DIST_POINTS:Ljava/lang/String;

    invoke-static {v3, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    .line 951
    if-eqz v2, :cond_107

    .line 953
    invoke-static {v2}, Lorg/spongycastle/asn1/x509/CRLDistPoint;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/CRLDistPoint;
    :try_end_106
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_fb .. :try_end_106} :catch_35d

    move-result-object v1

    .line 963
    :cond_107
    :goto_107
    const/4 v2, 0x0

    .line 966
    :try_start_108
    sget-object v4, Lorg/spongycastle/x509/PKIXCertPathReviewer;->AUTH_INFO_ACCESS:Ljava/lang/String;

    invoke-static {v3, v4}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v4

    .line 967
    if-eqz v4, :cond_114

    .line 969
    invoke-static {v4}, Lorg/spongycastle/asn1/x509/AuthorityInformationAccess;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/AuthorityInformationAccess;
    :try_end_113
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_108 .. :try_end_113} :catch_36e

    move-result-object v2

    .line 978
    :cond_114
    :goto_114
    move-object/from16 v0, p0

    invoke-virtual {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getCRLDistUrls(Lorg/spongycastle/asn1/x509/CRLDistPoint;)Ljava/util/Vector;

    move-result-object v7

    .line 979
    move-object/from16 v0, p0

    invoke-virtual {v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getOCSPUrls(Lorg/spongycastle/asn1/x509/AuthorityInformationAccess;)Ljava/util/Vector;

    move-result-object v8

    .line 984
    invoke-virtual {v7}, Ljava/util/Vector;->iterator()Ljava/util/Iterator;

    move-result-object v1

    .line 985
    :goto_124
    invoke-interface {v1}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_37f

    .line 987
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v13, "CertPathReviewer.crlDistPoint"

    const/4 v14, 0x1

    new-array v14, v14, [Ljava/lang/Object;

    const/4 v15, 0x0

    new-instance v16, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;

    .line 988
    invoke-interface {v1}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v17

    invoke-direct/range {v16 .. v17}, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;-><init>(Ljava/lang/Object;)V

    aput-object v16, v14, v15

    invoke-direct {v2, v4, v13, v14}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 989
    move-object/from16 v0, p0

    invoke-virtual {v0, v2, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto :goto_124

    .line 721
    :cond_148
    :try_start_148
    invoke-interface {v2}, Ljava/util/Collection;->isEmpty()Z

    move-result v5

    if-eqz v5, :cond_181

    .line 723
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.noTrustAnchorFound"

    const/4 v7, 0x2

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v9, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 725
    invoke-virtual {v1}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v1

    invoke-direct {v9, v1}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    const/4 v1, 0x1

    move-object/from16 v0, p0

    iget-object v8, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 726
    invoke-virtual {v8}, Ljava/security/cert/PKIXParameters;->getTrustAnchors()Ljava/util/Set;

    move-result-object v8

    invoke-interface {v8}, Ljava/util/Set;->size()I

    move-result v8

    invoke-static {v8}, Lorg/spongycastle/util/Integers;->valueOf(I)Ljava/lang/Integer;

    move-result-object v8

    aput-object v8, v7, v1

    invoke-direct {v2, v5, v6, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 727
    move-object/from16 v0, p0

    invoke-virtual {v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    move-object v11, v3

    .line 728
    goto/16 :goto_7e

    .line 732
    :cond_181
    invoke-interface {v2}, Ljava/util/Collection;->iterator()Ljava/util/Iterator;

    move-result-object v2

    invoke-interface {v2}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/security/cert/TrustAnchor;
    :try_end_18b
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_148 .. :try_end_18b} :catch_1c2
    .catch Ljava/lang/Throwable; {:try_start_148 .. :try_end_18b} :catch_1d0

    .line 733
    :try_start_18b
    invoke-virtual {v2}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v3

    if-eqz v3, :cond_1a7

    .line 735
    invoke-virtual {v2}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v3

    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getPublicKey()Ljava/security/PublicKey;
    :try_end_198
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_18b .. :try_end_198} :catch_4a4
    .catch Ljava/lang/Throwable; {:try_start_18b .. :try_end_198} :catch_4a0

    move-result-object v3

    .line 743
    :goto_199
    :try_start_199
    move-object/from16 v0, p0

    iget-object v5, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 744
    invoke-virtual {v5}, Ljava/security/cert/PKIXParameters;->getSigProvider()Ljava/lang/String;

    move-result-object v5

    .line 743
    invoke-static {v1, v3, v5}, Lorg/spongycastle/x509/CertPathValidatorUtilities;->verifyX509Certificate(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V
    :try_end_1a4
    .catch Ljava/security/SignatureException; {:try_start_199 .. :try_end_1a4} :catch_1ac
    .catch Ljava/lang/Exception; {:try_start_199 .. :try_end_1a4} :catch_1be
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_199 .. :try_end_1a4} :catch_4a4
    .catch Ljava/lang/Throwable; {:try_start_199 .. :try_end_1a4} :catch_4a0

    move-object v11, v2

    .line 754
    goto/16 :goto_7e

    .line 739
    :cond_1a7
    :try_start_1a7
    invoke-virtual {v2}, Ljava/security/cert/TrustAnchor;->getCAPublicKey()Ljava/security/PublicKey;

    move-result-object v3

    goto :goto_199

    .line 748
    :catch_1ac
    move-exception v1

    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.trustButInvalidCert"

    invoke-direct {v1, v3, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 749
    move-object/from16 v0, p0

    invoke-virtual {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V
    :try_end_1bb
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_1a7 .. :try_end_1bb} :catch_4a4
    .catch Ljava/lang/Throwable; {:try_start_1a7 .. :try_end_1bb} :catch_4a0

    move-object v11, v2

    .line 754
    goto/16 :goto_7e

    :catch_1be
    move-exception v1

    move-object v11, v2

    .line 767
    goto/16 :goto_7e

    .line 757
    :catch_1c2
    move-exception v1

    move-object v2, v3

    .line 759
    :goto_1c4
    invoke-virtual {v1}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v1

    move-object/from16 v0, p0

    invoke-virtual {v0, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    move-object v11, v2

    .line 767
    goto/16 :goto_7e

    .line 761
    :catch_1d0
    move-exception v1

    .line 763
    :goto_1d1
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.unknown"

    const/4 v7, 0x2

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v9, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 765
    invoke-virtual {v1}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;

    move-result-object v10

    invoke-direct {v9, v10}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    const/4 v8, 0x1

    new-instance v9, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v9, v1}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    invoke-direct {v2, v5, v6, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 766
    move-object/from16 v0, p0

    invoke-virtual {v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    move-object v11, v3

    goto/16 :goto_7e

    .line 781
    :cond_1f9
    :try_start_1f9
    new-instance v3, Ljavax/security/auth/x500/X500Principal;

    invoke-virtual {v11}, Ljava/security/cert/TrustAnchor;->getCAName()Ljava/lang/String;

    move-result-object v2

    invoke-direct {v3, v2}, Ljavax/security/auth/x500/X500Principal;-><init>(Ljava/lang/String;)V
    :try_end_202
    .catch Ljava/lang/IllegalArgumentException; {:try_start_1f9 .. :try_end_202} :catch_204

    goto/16 :goto_8a

    .line 786
    :catch_204
    move-exception v2

    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.trustDNInvalid"

    const/4 v6, 0x1

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 787
    invoke-virtual {v11}, Ljava/security/cert/TrustAnchor;->getCAName()Ljava/lang/String;

    move-result-object v9

    invoke-direct {v8, v9}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v2, v3, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 788
    move-object/from16 v0, p0

    invoke-virtual {v0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    move-object v3, v4

    goto/16 :goto_8a

    .line 824
    :cond_225
    invoke-virtual {v11}, Ljava/security/cert/TrustAnchor;->getCAPublicKey()Ljava/security/PublicKey;

    move-result-object v2

    goto/16 :goto_b3

    .line 835
    :catch_22b
    move-exception v4

    new-instance v4, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.trustPubKeyError"

    invoke-direct {v4, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 836
    move-object/from16 v0, p0

    invoke-virtual {v0, v4}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;)V

    goto/16 :goto_bd

    .line 870
    :catch_23c
    move-exception v1

    .line 872
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.signatureNotVerified"

    const/4 v8, 0x3

    new-array v8, v8, [Ljava/lang/Object;

    const/4 v13, 0x0

    .line 873
    invoke-virtual {v1}, Ljava/security/GeneralSecurityException;->getMessage()Ljava/lang/String;

    move-result-object v14

    aput-object v14, v8, v13

    const/4 v13, 0x1

    aput-object v1, v8, v13

    const/4 v13, 0x2

    invoke-virtual {v1}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v1

    invoke-virtual {v1}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v1

    aput-object v1, v8, v13

    invoke-direct {v2, v4, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 874
    move-object/from16 v0, p0

    invoke-virtual {v0, v2, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_e9

    .line 877
    :cond_265
    invoke-static {v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->isSelfIssued(Ljava/security/cert/X509Certificate;)Z

    move-result v1

    if-eqz v1, :cond_2b3

    .line 881
    :try_start_26b
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getPublicKey()Ljava/security/PublicKey;

    move-result-object v1

    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 882
    invoke-virtual {v2}, Ljava/security/cert/PKIXParameters;->getSigProvider()Ljava/lang/String;

    move-result-object v2

    .line 881
    invoke-static {v3, v1, v2}, Lorg/spongycastle/x509/CertPathValidatorUtilities;->verifyX509Certificate(Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/lang/String;)V

    .line 883
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.rootKeyIsValidButNotATrustAnchor"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 884
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_288
    .catch Ljava/security/GeneralSecurityException; {:try_start_26b .. :try_end_288} :catch_28a

    goto/16 :goto_e9

    .line 886
    :catch_28a
    move-exception v1

    .line 888
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.signatureNotVerified"

    const/4 v8, 0x3

    new-array v8, v8, [Ljava/lang/Object;

    const/4 v13, 0x0

    .line 889
    invoke-virtual {v1}, Ljava/security/GeneralSecurityException;->getMessage()Ljava/lang/String;

    move-result-object v14

    aput-object v14, v8, v13

    const/4 v13, 0x1

    aput-object v1, v8, v13

    const/4 v13, 0x2

    invoke-virtual {v1}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v1

    invoke-virtual {v1}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v1

    aput-object v1, v8, v13

    invoke-direct {v2, v4, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 890
    move-object/from16 v0, p0

    invoke-virtual {v0, v2, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_e9

    .line 895
    :cond_2b3
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.NoIssuerPublicKey"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 897
    sget-object v2, Lorg/spongycastle/asn1/x509/X509Extensions;->AuthorityKeyIdentifier:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v2

    invoke-virtual {v3, v2}, Ljava/security/cert/X509Certificate;->getExtensionValue(Ljava/lang/String;)[B

    move-result-object v2

    .line 898
    if-eqz v2, :cond_316

    .line 903
    :try_start_2c8
    invoke-static {v2}, Lorg/spongycastle/x509/extension/X509ExtensionUtil;->fromExtensionValue([B)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    .line 902
    invoke-static {v2}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;

    move-result-object v2

    .line 904
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getAuthorityCertIssuer()Lorg/spongycastle/asn1/x509/GeneralNames;

    move-result-object v4

    .line 905
    if-eqz v4, :cond_316

    .line 907
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/GeneralNames;->getNames()[Lorg/spongycastle/asn1/x509/GeneralName;

    move-result-object v4

    const/4 v7, 0x0

    aget-object v4, v4, v7

    .line 908
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getAuthorityCertSerialNumber()Ljava/math/BigInteger;

    move-result-object v2

    .line 909
    if-eqz v2, :cond_316

    .line 911
    const/4 v7, 0x7

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v13, Lorg/spongycastle/i18n/LocaleString;

    const-string v14, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v15, "missingIssuer"

    invoke-direct {v13, v14, v15}, Lorg/spongycastle/i18n/LocaleString;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    aput-object v13, v7, v8

    const/4 v8, 0x1

    const-string v13, " \""

    aput-object v13, v7, v8

    const/4 v8, 0x2

    aput-object v4, v7, v8

    const/4 v4, 0x3

    const-string v8, "\" "

    aput-object v8, v7, v4

    const/4 v4, 0x4

    new-instance v8, Lorg/spongycastle/i18n/LocaleString;

    const-string v13, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v14, "missingSerial"

    invoke-direct {v8, v13, v14}, Lorg/spongycastle/i18n/LocaleString;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    aput-object v8, v7, v4

    const/4 v4, 0x5

    const-string v8, " "

    aput-object v8, v7, v4

    const/4 v4, 0x6

    aput-object v2, v7, v4

    .line 913
    invoke-virtual {v1, v7}, Lorg/spongycastle/i18n/ErrorBundle;->setExtraArguments([Ljava/lang/Object;)V
    :try_end_316
    .catch Ljava/io/IOException; {:try_start_2c8 .. :try_end_316} :catch_49d

    .line 922
    :cond_316
    :goto_316
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_e9

    .line 932
    :catch_31d
    move-exception v1

    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.certificateNotYetValid"

    const/4 v7, 0x1

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v13, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 933
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getNotBefore()Ljava/util/Date;

    move-result-object v14

    invoke-direct {v13, v14}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v13, v7, v8

    invoke-direct {v1, v2, v4, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 934
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_f0

    .line 938
    :catch_33d
    move-exception v1

    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.certificateExpired"

    const/4 v7, 0x1

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v13, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 939
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getNotAfter()Ljava/util/Date;

    move-result-object v14

    invoke-direct {v13, v14}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v13, v7, v8

    invoke-direct {v1, v2, v4, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 940
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_f0

    .line 958
    :catch_35d
    move-exception v2

    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.crlDistPtExtError"

    invoke-direct {v2, v4, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 959
    move-object/from16 v0, p0

    invoke-virtual {v0, v2, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_107

    .line 974
    :catch_36e
    move-exception v4

    new-instance v4, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v7, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v8, "CertPathReviewer.crlAuthInfoAccError"

    invoke-direct {v4, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 975
    move-object/from16 v0, p0

    invoke-virtual {v0, v4, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_114

    .line 993
    :cond_37f
    invoke-virtual {v8}, Ljava/util/Vector;->iterator()Ljava/util/Iterator;

    move-result-object v1

    .line 994
    :goto_383
    invoke-interface {v1}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_3a7

    .line 996
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v13, "CertPathReviewer.ocspLocation"

    const/4 v14, 0x1

    new-array v14, v14, [Ljava/lang/Object;

    const/4 v15, 0x0

    new-instance v16, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;

    .line 997
    invoke-interface {v1}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v17

    invoke-direct/range {v16 .. v17}, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;-><init>(Ljava/lang/Object;)V

    aput-object v16, v14, v15

    invoke-direct {v2, v4, v13, v14}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 998
    move-object/from16 v0, p0

    invoke-virtual {v0, v2, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto :goto_383

    .line 1005
    :cond_3a7
    :try_start_3a7
    move-object/from16 v0, p0

    iget-object v2, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    move-object/from16 v0, p0

    iget-object v4, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->validDate:Ljava/util/Date;

    move-object/from16 v1, p0

    invoke-virtual/range {v1 .. v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkRevocation(Ljava/security/cert/PKIXParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Vector;Ljava/util/Vector;I)V
    :try_end_3b4
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_3a7 .. :try_end_3b4} :catch_456

    .line 1014
    :cond_3b4
    :goto_3b4
    if-eqz v10, :cond_3e3

    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v1

    invoke-virtual {v1, v10}, Ljavax/security/auth/x500/X500Principal;->equals(Ljava/lang/Object;)Z

    move-result v1

    if-nez v1, :cond_3e3

    .line 1016
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.certWrongIssuer"

    const/4 v5, 0x2

    new-array v5, v5, [Ljava/lang/Object;

    const/4 v7, 0x0

    .line 1017
    invoke-virtual {v10}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v8

    aput-object v8, v5, v7

    const/4 v7, 0x1

    .line 1018
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v8

    invoke-virtual {v8}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v8

    aput-object v8, v5, v7

    invoke-direct {v1, v2, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1019
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1025
    :cond_3e3
    move-object/from16 v0, p0

    iget v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    if-eq v12, v1, :cond_439

    .line 1028
    if-eqz v3, :cond_400

    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getVersion()I

    move-result v1

    const/4 v2, 0x1

    if-ne v1, v2, :cond_400

    .line 1030
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noCACert"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1031
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1039
    :cond_400
    :try_start_400
    sget-object v1, Lorg/spongycastle/x509/PKIXCertPathReviewer;->BASIC_CONSTRAINTS:Ljava/lang/String;

    invoke-static {v3, v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v1

    invoke-static {v1}, Lorg/spongycastle/asn1/x509/BasicConstraints;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/BasicConstraints;

    move-result-object v1

    .line 1041
    if-eqz v1, :cond_462

    .line 1043
    invoke-virtual {v1}, Lorg/spongycastle/asn1/x509/BasicConstraints;->isCA()Z

    move-result v1

    if-nez v1, :cond_420

    .line 1045
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noCACert"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1046
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_420
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_400 .. :try_end_420} :catch_471

    .line 1063
    :cond_420
    :goto_420
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getKeyUsage()[Z

    move-result-object v1

    .line 1065
    if-eqz v1, :cond_439

    const/4 v2, 0x5

    aget-boolean v1, v1, v2

    if-nez v1, :cond_439

    .line 1067
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noCertSign"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1068
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1078
    :cond_439
    invoke-virtual {v3}, Ljava/security/cert/X509Certificate;->getSubjectX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v2

    .line 1084
    :try_start_43d
    move-object/from16 v0, p0

    iget-object v1, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-static {v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getNextWorkingKey(Ljava/util/List;I)Ljava/security/PublicKey;
    :try_end_444
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_43d .. :try_end_444} :catch_481

    move-result-object v1

    .line 1085
    :try_start_445
    invoke-static {v1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getAlgorithmIdentifier(Ljava/security/PublicKey;)Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;

    move-result-object v4

    .line 1086
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;->getAlgorithm()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    .line 1087
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/AlgorithmIdentifier;->getParameters()Lorg/spongycastle/asn1/ASN1Encodable;
    :try_end_44f
    .catch Ljava/security/cert/CertPathValidatorException; {:try_start_445 .. :try_end_44f} :catch_49b

    .line 847
    :goto_44f
    add-int/lit8 v9, v9, -0x1

    move-object v5, v3

    move-object v10, v2

    move-object v6, v1

    goto/16 :goto_ca

    .line 1007
    :catch_456
    move-exception v1

    .line 1009
    invoke-virtual {v1}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v1

    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_3b4

    .line 1051
    :cond_462
    :try_start_462
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noBasicConstraints"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1052
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_470
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_462 .. :try_end_470} :catch_471

    goto :goto_420

    .line 1057
    :catch_471
    move-exception v1

    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.errorProcesingBC"

    invoke-direct {v1, v2, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1058
    move-object/from16 v0, p0

    invoke-virtual {v0, v1, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto :goto_420

    .line 1091
    :catch_481
    move-exception v1

    move-object v1, v6

    :goto_483
    new-instance v4, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.pubKeyError"

    invoke-direct {v4, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1092
    move-object/from16 v0, p0

    invoke-virtual {v0, v4, v9}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto :goto_44f

    .line 1100
    :cond_492
    move-object/from16 v0, p0

    iput-object v11, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->trustAnchor:Ljava/security/cert/TrustAnchor;

    .line 1101
    move-object/from16 v0, p0

    iput-object v6, v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->subjectPublicKey:Ljava/security/PublicKey;

    .line 1102
    return-void

    .line 1091
    :catch_49b
    move-exception v4

    goto :goto_483

    :catch_49d
    move-exception v2

    goto/16 :goto_316

    .line 761
    :catch_4a0
    move-exception v1

    move-object v3, v2

    goto/16 :goto_1d1

    .line 757
    :catch_4a4
    move-exception v1

    goto/16 :goto_1c4

    :cond_4a7
    move-object v3, v4

    goto/16 :goto_a5
.end method

.method private getCRL(Ljava/lang/String;)Ljava/security/cert/X509CRL;
    .registers 10

    .prologue
    const/4 v7, 0x1

    const/4 v6, 0x0

    .line 2456
    const/4 v0, 0x0

    .line 2459
    :try_start_3
    new-instance v1, Ljava/net/URL;

    invoke-direct {v1, p1}, Ljava/net/URL;-><init>(Ljava/lang/String;)V

    .line 2461
    invoke-virtual {v1}, Ljava/net/URL;->getProtocol()Ljava/lang/String;

    move-result-object v2

    const-string v3, "http"

    invoke-virtual {v2, v3}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v2

    if-nez v2, :cond_20

    invoke-virtual {v1}, Ljava/net/URL;->getProtocol()Ljava/lang/String;

    move-result-object v2

    const-string v3, "https"

    invoke-virtual {v2, v3}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z

    move-result v2

    if-eqz v2, :cond_4b

    .line 2463
    :cond_20
    invoke-virtual {v1}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;

    move-result-object v0

    check-cast v0, Ljava/net/HttpURLConnection;

    .line 2464
    const/4 v1, 0x0

    invoke-virtual {v0, v1}, Ljava/net/HttpURLConnection;->setUseCaches(Z)V

    .line 2466
    const/4 v1, 0x1

    invoke-virtual {v0, v1}, Ljava/net/HttpURLConnection;->setDoInput(Z)V

    .line 2467
    invoke-virtual {v0}, Ljava/net/HttpURLConnection;->connect()V

    .line 2468
    invoke-virtual {v0}, Ljava/net/HttpURLConnection;->getResponseCode()I

    move-result v1

    const/16 v2, 0xc8

    if-ne v1, v2, :cond_4c

    .line 2470
    const-string v1, "X.509"

    const-string v2, "SC"

    invoke-static {v1, v2}, Ljava/security/cert/CertificateFactory;->getInstance(Ljava/lang/String;Ljava/lang/String;)Ljava/security/cert/CertificateFactory;

    move-result-object v1

    .line 2471
    invoke-virtual {v0}, Ljava/net/HttpURLConnection;->getInputStream()Ljava/io/InputStream;

    move-result-object v0

    invoke-virtual {v1, v0}, Ljava/security/cert/CertificateFactory;->generateCRL(Ljava/io/InputStream;)Ljava/security/cert/CRL;

    move-result-object v0

    check-cast v0, Ljava/security/cert/X509CRL;

    .line 2487
    :cond_4b
    return-object v0

    .line 2475
    :cond_4c
    new-instance v1, Ljava/lang/Exception;

    invoke-virtual {v0}, Ljava/net/HttpURLConnection;->getResponseMessage()Ljava/lang/String;

    move-result-object v0

    invoke-direct {v1, v0}, Ljava/lang/Exception;-><init>(Ljava/lang/String;)V

    throw v1
    :try_end_56
    .catch Ljava/lang/Exception; {:try_start_3 .. :try_end_56} :catch_56

    .line 2479
    :catch_56
    move-exception v0

    .line 2481
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.loadCrlDistPointError"

    const/4 v4, 0x4

    new-array v4, v4, [Ljava/lang/Object;

    new-instance v5, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v5, p1}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v5, v4, v6

    .line 2484
    invoke-virtual {v0}, Ljava/lang/Exception;->getMessage()Ljava/lang/String;

    move-result-object v5

    aput-object v5, v4, v7

    const/4 v5, 0x2

    aput-object v0, v4, v5

    const/4 v5, 0x3

    invoke-virtual {v0}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v0

    invoke-virtual {v0}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v0

    aput-object v0, v4, v5

    invoke-direct {v1, v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2485
    new-instance v0, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v0, v1}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v0
.end method

.method private processQcStatements(Ljava/security/cert/X509Certificate;I)Z
    .registers 16

    .prologue
    .line 1926
    const/4 v2, 0x0

    .line 1928
    :try_start_1
    sget-object v0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->QC_STATEMENT:Ljava/lang/String;

    invoke-static {p1, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v0

    check-cast v0, Lorg/spongycastle/asn1/ASN1Sequence;

    .line 1929
    const/4 v1, 0x0

    move v3, v1

    move v1, v2

    :goto_c
    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1Sequence;->size()I

    move-result v2

    if-ge v3, v2, :cond_11b

    .line 1931
    invoke-virtual {v0, v3}, Lorg/spongycastle/asn1/ASN1Sequence;->getObjectAt(I)Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v2

    invoke-static {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/qualified/QCStatement;

    move-result-object v2

    .line 1932
    sget-object v4, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->id_etsi_qcs_QcCompliance:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementId()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v5

    invoke-virtual {v4, v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->equals(Ljava/lang/Object;)Z

    move-result v4

    if-eqz v4, :cond_36

    .line 1935
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.QcEuCompliance"

    invoke-direct {v2, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1936
    invoke-virtual {p0, v2, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1929
    :cond_32
    :goto_32
    add-int/lit8 v2, v3, 0x1

    move v3, v2

    goto :goto_c

    .line 1938
    :cond_36
    sget-object v4, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->id_qcs_pkixQCSyntax_v1:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementId()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v5

    invoke-virtual {v4, v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->equals(Ljava/lang/Object;)Z

    move-result v4

    if-nez v4, :cond_32

    .line 1942
    sget-object v4, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->id_etsi_qcs_QcSSCD:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementId()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v5

    invoke-virtual {v4, v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->equals(Ljava/lang/Object;)Z

    move-result v4

    if-eqz v4, :cond_6a

    .line 1945
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.QcSSCD"

    invoke-direct {v2, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1946
    invoke-virtual {p0, v2, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_5a
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_1 .. :try_end_5a} :catch_5b

    goto :goto_32

    .line 1984
    :catch_5b
    move-exception v0

    new-instance v0, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v1, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v2, "CertPathReviewer.QcStatementExtError"

    invoke-direct {v0, v1, v2}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 1985
    invoke-virtual {p0, v0, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 1988
    const/4 v0, 0x0

    :goto_69
    return v0

    .line 1948
    :cond_6a
    :try_start_6a
    sget-object v4, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->id_etsi_qcs_LimiteValue:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementId()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v5

    invoke-virtual {v4, v5}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->equals(Ljava/lang/Object;)Z

    move-result v4

    if-eqz v4, :cond_fa

    .line 1951
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementInfo()Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v2

    invoke-static {v2}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;

    move-result-object v4

    .line 1952
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getCurrency()Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;

    .line 1953
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getAmount()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->doubleValue()D

    move-result-wide v6

    const-wide/high16 v8, 0x4024000000000000L    # 10.0

    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getExponent()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v2}, Ljava/math/BigInteger;->doubleValue()D

    move-result-wide v10

    invoke-static {v8, v9, v10, v11}, Ljava/lang/Math;->pow(DD)D

    move-result-wide v8

    mul-double/2addr v6, v8

    .line 1955
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getCurrency()Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;

    move-result-object v2

    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;->isAlphabetic()Z

    move-result v2

    if-eqz v2, :cond_ce

    .line 1957
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v8, "CertPathReviewer.QcLimitValueAlpha"

    const/4 v9, 0x3

    new-array v9, v9, [Ljava/lang/Object;

    const/4 v10, 0x0

    .line 1958
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getCurrency()Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;

    move-result-object v11

    invoke-virtual {v11}, Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;->getAlphabetic()Ljava/lang/String;

    move-result-object v11

    aput-object v11, v9, v10

    const/4 v10, 0x1

    new-instance v11, Lorg/spongycastle/i18n/filter/TrustedInput;

    new-instance v12, Ljava/lang/Double;

    invoke-direct {v12, v6, v7}, Ljava/lang/Double;-><init>(D)V

    invoke-direct {v11, v12}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v9, v10

    const/4 v6, 0x2

    aput-object v4, v9, v6

    invoke-direct {v2, v5, v8, v9}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1969
    :goto_c9
    invoke-virtual {p0, v2, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_32

    .line 1964
    :cond_ce
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v8, "CertPathReviewer.QcLimitValueNum"

    const/4 v9, 0x3

    new-array v9, v9, [Ljava/lang/Object;

    const/4 v10, 0x0

    .line 1965
    invoke-virtual {v4}, Lorg/spongycastle/asn1/x509/qualified/MonetaryValue;->getCurrency()Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;

    move-result-object v11

    invoke-virtual {v11}, Lorg/spongycastle/asn1/x509/qualified/Iso4217CurrencyCode;->getNumeric()I

    move-result v11

    invoke-static {v11}, Lorg/spongycastle/util/Integers;->valueOf(I)Ljava/lang/Integer;

    move-result-object v11

    aput-object v11, v9, v10

    const/4 v10, 0x1

    new-instance v11, Lorg/spongycastle/i18n/filter/TrustedInput;

    new-instance v12, Ljava/lang/Double;

    invoke-direct {v12, v6, v7}, Ljava/lang/Double;-><init>(D)V

    invoke-direct {v11, v12}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v9, v10

    const/4 v6, 0x2

    aput-object v4, v9, v6

    invoke-direct {v2, v5, v8, v9}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    goto :goto_c9

    .line 1973
    :cond_fa
    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.QcUnknownStatement"

    const/4 v6, 0x2

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    .line 1974
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/qualified/QCStatement;->getStatementId()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v8

    aput-object v8, v6, v7

    const/4 v7, 0x1

    new-instance v8, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v8, v2}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v8, v6, v7

    invoke-direct {v1, v4, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 1975
    invoke-virtual {p0, v1, p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_118
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_6a .. :try_end_118} :catch_5b

    .line 1976
    const/4 v1, 0x1

    goto/16 :goto_32

    .line 1980
    :cond_11b
    if-nez v1, :cond_120

    const/4 v0, 0x1

    goto/16 :goto_69

    :cond_120
    const/4 v0, 0x0

    goto/16 :goto_69
.end method


# virtual methods
.method protected addError(Lorg/spongycastle/i18n/ErrorBundle;)V
    .registers 4

    .prologue
    .line 334
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    const/4 v1, 0x0

    aget-object v0, v0, v1

    invoke-interface {v0, p1}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    .line 335
    return-void
.end method

.method protected addError(Lorg/spongycastle/i18n/ErrorBundle;I)V
    .registers 5

    .prologue
    .line 339
    const/4 v0, -0x1

    if-lt p2, v0, :cond_7

    iget v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    if-lt p2, v0, :cond_d

    .line 341
    :cond_7
    new-instance v0, Ljava/lang/IndexOutOfBoundsException;

    invoke-direct {v0}, Ljava/lang/IndexOutOfBoundsException;-><init>()V

    throw v0

    .line 343
    :cond_d
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    add-int/lit8 v1, p2, 0x1

    aget-object v0, v0, v1

    invoke-interface {v0, p1}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    .line 344
    return-void
.end method

.method protected addNotification(Lorg/spongycastle/i18n/ErrorBundle;)V
    .registers 4

    .prologue
    .line 320
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    const/4 v1, 0x0

    aget-object v0, v0, v1

    invoke-interface {v0, p1}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    .line 321
    return-void
.end method

.method protected addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    .registers 5

    .prologue
    .line 325
    const/4 v0, -0x1

    if-lt p2, v0, :cond_7

    iget v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    if-lt p2, v0, :cond_d

    .line 327
    :cond_7
    new-instance v0, Ljava/lang/IndexOutOfBoundsException;

    invoke-direct {v0}, Ljava/lang/IndexOutOfBoundsException;-><init>()V

    throw v0

    .line 329
    :cond_d
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    add-int/lit8 v1, p2, 0x1

    aget-object v0, v0, v1

    invoke-interface {v0, p1}, Ljava/util/List;->add(Ljava/lang/Object;)Z

    .line 330
    return-void
.end method

.method protected checkCRLs(Ljava/security/cert/PKIXParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Vector;I)V
    .registers 23

    .prologue
    .line 2038
    new-instance v4, Lorg/spongycastle/x509/X509CRLStoreSelector;

    invoke-direct {v4}, Lorg/spongycastle/x509/X509CRLStoreSelector;-><init>()V

    .line 2042
    :try_start_5
    invoke-static/range {p2 .. p2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getEncodedIssuerPrincipal(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;

    move-result-object v2

    invoke-virtual {v2}, Ljavax/security/auth/x500/X500Principal;->getEncoded()[B

    move-result-object v2

    invoke-virtual {v4, v2}, Lorg/spongycastle/x509/X509CRLStoreSelector;->addIssuerName([B)V
    :try_end_10
    .catch Ljava/io/IOException; {:try_start_5 .. :try_end_10} :catch_14c

    .line 2050
    move-object/from16 v0, p2

    invoke-virtual {v4, v0}, Lorg/spongycastle/x509/X509CRLStoreSelector;->setCertificateChecking(Ljava/security/cert/X509Certificate;)V

    .line 2055
    :try_start_15
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_UTIL:Lorg/spongycastle/x509/PKIXCRLUtil;

    move-object/from16 v0, p1

    invoke-virtual {v2, v4, v0}, Lorg/spongycastle/x509/PKIXCRLUtil;->findCRLs(Lorg/spongycastle/x509/X509CRLStoreSelector;Ljava/security/cert/PKIXParameters;)Ljava/util/Set;

    move-result-object v2

    .line 2056
    invoke-interface {v2}, Ljava/util/Collection;->iterator()Ljava/util/Iterator;

    move-result-object v3

    .line 2058
    invoke-interface {v2}, Ljava/util/Collection;->isEmpty()Z

    move-result v2

    if-eqz v2, :cond_8e

    .line 2061
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_UTIL:Lorg/spongycastle/x509/PKIXCRLUtil;

    new-instance v5, Lorg/spongycastle/x509/X509CRLStoreSelector;

    invoke-direct {v5}, Lorg/spongycastle/x509/X509CRLStoreSelector;-><init>()V

    move-object/from16 v0, p1

    invoke-virtual {v2, v5, v0}, Lorg/spongycastle/x509/PKIXCRLUtil;->findCRLs(Lorg/spongycastle/x509/X509CRLStoreSelector;Ljava/security/cert/PKIXParameters;)Ljava/util/Set;

    move-result-object v2

    .line 2062
    invoke-interface {v2}, Ljava/util/Collection;->iterator()Ljava/util/Iterator;

    move-result-object v5

    .line 2063
    new-instance v6, Ljava/util/ArrayList;

    invoke-direct {v6}, Ljava/util/ArrayList;-><init>()V

    .line 2064
    :goto_3d
    invoke-interface {v5}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_15c

    .line 2066
    invoke-interface {v5}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/security/cert/X509CRL;

    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v2

    invoke-interface {v6, v2}, Ljava/util/List;->add(Ljava/lang/Object;)Z
    :try_end_50
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_15 .. :try_end_50} :catch_51

    goto :goto_3d

    .line 2078
    :catch_51
    move-exception v2

    .line 2080
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlExtractionError"

    const/4 v6, 0x3

    new-array v6, v6, [Ljava/lang/Object;

    const/4 v7, 0x0

    .line 2081
    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/AnnotatedException;->getCause()Ljava/lang/Throwable;

    move-result-object v8

    invoke-virtual {v8}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;

    move-result-object v8

    aput-object v8, v6, v7

    const/4 v7, 0x1

    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/AnnotatedException;->getCause()Ljava/lang/Throwable;

    move-result-object v8

    aput-object v8, v6, v7

    const/4 v7, 0x2

    invoke-virtual {v2}, Lorg/spongycastle/jce/provider/AnnotatedException;->getCause()Ljava/lang/Throwable;

    move-result-object v2

    invoke-virtual {v2}, Ljava/lang/Object;->getClass()Ljava/lang/Class;

    move-result-object v2

    invoke-virtual {v2}, Ljava/lang/Class;->getName()Ljava/lang/String;

    move-result-object v2

    aput-object v2, v6, v7

    invoke-direct {v3, v4, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2082
    move/from16 v0, p7

    invoke-virtual {p0, v3, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addError(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 2083
    new-instance v2, Ljava/util/ArrayList;

    invoke-direct {v2}, Ljava/util/ArrayList;-><init>()V

    invoke-virtual {v2}, Ljava/util/ArrayList;->iterator()Ljava/util/Iterator;

    move-result-object v2

    move-object v3, v2

    .line 2085
    :cond_8e
    :goto_8e
    const/4 v4, 0x0

    .line 2086
    const/4 v2, 0x0

    .line 2087
    :goto_90
    invoke-interface {v3}, Ljava/util/Iterator;->hasNext()Z

    move-result v5

    if-eqz v5, :cond_4c8

    .line 2089
    invoke-interface {v3}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/security/cert/X509CRL;

    .line 2091
    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v5

    if-eqz v5, :cond_b0

    .line 2092
    invoke-virtual/range {p1 .. p1}, Ljava/security/cert/PKIXParameters;->getDate()Ljava/util/Date;

    move-result-object v5

    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v6

    invoke-virtual {v5, v6}, Ljava/util/Date;->before(Ljava/util/Date;)Z

    move-result v5

    if-eqz v5, :cond_18e

    .line 2094
    :cond_b0
    const/4 v3, 0x1

    .line 2095
    new-instance v4, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.localValidCRL"

    const/4 v7, 0x2

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v9, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2097
    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getThisUpdate()Ljava/util/Date;

    move-result-object v10

    invoke-direct {v9, v10}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    const/4 v8, 0x1

    new-instance v9, Lorg/spongycastle/i18n/filter/TrustedInput;

    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v10

    invoke-direct {v9, v10}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    invoke-direct {v4, v5, v6, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2098
    move/from16 v0, p7

    invoke-virtual {p0, v4, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    move-object v5, v2

    move v2, v3

    .line 2112
    :goto_dc
    if-nez v2, :cond_4c4

    .line 2115
    invoke-virtual/range {p6 .. p6}, Ljava/util/Vector;->iterator()Ljava/util/Iterator;

    move-result-object v6

    move v3, v2

    .line 2116
    :cond_e3
    :goto_e3
    invoke-interface {v6}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_4c0

    .line 2120
    :try_start_e9
    invoke-interface {v6}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/lang/String;

    .line 2121
    invoke-direct {p0, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getCRL(Ljava/lang/String;)Ljava/security/cert/X509CRL;

    move-result-object v4

    .line 2122
    if-eqz v4, :cond_e3

    .line 2125
    invoke-virtual/range {p2 .. p2}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v7

    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v8

    invoke-virtual {v7, v8}, Ljavax/security/auth/x500/X500Principal;->equals(Ljava/lang/Object;)Z

    move-result v7

    if-nez v7, :cond_1b9

    .line 2127
    new-instance v7, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v8, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v9, "CertPathReviewer.onlineCRLWrongCA"

    const/4 v10, 0x3

    new-array v10, v10, [Ljava/lang/Object;

    const/4 v11, 0x0

    new-instance v12, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 2129
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v4

    invoke-virtual {v4}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v4

    invoke-direct {v12, v4}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    const/4 v4, 0x1

    new-instance v11, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 2130
    invoke-virtual/range {p2 .. p2}, Ljava/security/cert/X509Certificate;->getIssuerX500Principal()Ljavax/security/auth/x500/X500Principal;

    move-result-object v12

    invoke-virtual {v12}, Ljavax/security/auth/x500/X500Principal;->getName()Ljava/lang/String;

    move-result-object v12

    invoke-direct {v11, v12}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v10, v4

    const/4 v4, 0x2

    new-instance v11, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;

    invoke-direct {v11, v2}, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v10, v4

    invoke-direct {v7, v8, v9, v10}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2132
    move/from16 v0, p7

    invoke-virtual {p0, v7, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_13c
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_e9 .. :try_end_13c} :catch_13d

    goto :goto_e3

    .line 2160
    :catch_13d
    move-exception v2

    move-object v14, v2

    move v2, v3

    move-object v3, v14

    .line 2162
    invoke-virtual {v3}, Lorg/spongycastle/x509/CertPathReviewerException;->getErrorMessage()Lorg/spongycastle/i18n/ErrorBundle;

    move-result-object v3

    move/from16 v0, p7

    invoke-virtual {p0, v3, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    move v3, v2

    .line 2163
    goto :goto_e3

    .line 2044
    :catch_14c
    move-exception v2

    .line 2046
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlIssuerException"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2047
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2068
    :cond_15c
    :try_start_15c
    invoke-interface {v6}, Ljava/util/List;->size()I

    move-result v2

    .line 2069
    new-instance v5, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v7, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v8, "CertPathReviewer.noCrlInCertstore"

    const/4 v9, 0x3

    new-array v9, v9, [Ljava/lang/Object;

    const/4 v10, 0x0

    new-instance v11, Lorg/spongycastle/i18n/filter/UntrustedInput;

    .line 2071
    invoke-virtual {v4}, Lorg/spongycastle/x509/X509CRLStoreSelector;->getIssuerNames()Ljava/util/Collection;

    move-result-object v4

    invoke-direct {v11, v4}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v9, v10

    const/4 v4, 0x1

    new-instance v10, Lorg/spongycastle/i18n/filter/UntrustedInput;

    invoke-direct {v10, v6}, Lorg/spongycastle/i18n/filter/UntrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v10, v9, v4

    const/4 v4, 0x2

    .line 2073
    invoke-static {v2}, Lorg/spongycastle/util/Integers;->valueOf(I)Ljava/lang/Integer;

    move-result-object v2

    aput-object v2, v9, v4

    invoke-direct {v5, v7, v8, v9}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2074
    move/from16 v0, p7

    invoke-virtual {p0, v5, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_18c
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_15c .. :try_end_18c} :catch_51

    goto/16 :goto_8e

    .line 2103
    :cond_18e
    new-instance v5, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v6, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v7, "CertPathReviewer.localInvalidCRL"

    const/4 v8, 0x2

    new-array v8, v8, [Ljava/lang/Object;

    const/4 v9, 0x0

    new-instance v10, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2105
    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getThisUpdate()Ljava/util/Date;

    move-result-object v11

    invoke-direct {v10, v11}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v10, v8, v9

    const/4 v9, 0x1

    new-instance v10, Lorg/spongycastle/i18n/filter/TrustedInput;

    invoke-virtual {v2}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v11

    invoke-direct {v10, v11}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v10, v8, v9

    invoke-direct {v5, v6, v7, v8}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2106
    move/from16 v0, p7

    invoke-virtual {p0, v5, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_90

    .line 2136
    :cond_1b9
    :try_start_1b9
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v7

    if-eqz v7, :cond_1cf

    iget-object v7, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 2137
    invoke-virtual {v7}, Ljava/security/cert/PKIXParameters;->getDate()Ljava/util/Date;

    move-result-object v7

    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v8

    invoke-virtual {v7, v8}, Ljava/util/Date;->before(Ljava/util/Date;)Z

    move-result v7

    if-eqz v7, :cond_226

    .line 2139
    :cond_1cf
    const/4 v3, 0x1

    .line 2140
    new-instance v7, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v8, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v9, "CertPathReviewer.onlineValidCRL"

    const/4 v10, 0x3

    new-array v10, v10, [Ljava/lang/Object;

    const/4 v11, 0x0

    new-instance v12, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2142
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getThisUpdate()Ljava/util/Date;

    move-result-object v13

    invoke-direct {v12, v13}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    const/4 v11, 0x1

    new-instance v12, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2143
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v13

    invoke-direct {v12, v13}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    const/4 v11, 0x2

    new-instance v12, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;

    invoke-direct {v12, v2}, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    invoke-direct {v7, v8, v9, v10}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2145
    move/from16 v0, p7

    invoke-virtual {p0, v7, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_201
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_1b9 .. :try_end_201} :catch_13d

    move-object v14, v4

    move v4, v3

    move-object v3, v14

    .line 2169
    :goto_204
    if-eqz v3, :cond_4ab

    .line 2171
    if-eqz p4, :cond_259

    .line 2173
    invoke-virtual/range {p4 .. p4}, Ljava/security/cert/X509Certificate;->getKeyUsage()[Z

    move-result-object v2

    .line 2175
    if-eqz v2, :cond_259

    array-length v5, v2

    const/4 v6, 0x7

    if-lt v5, v6, :cond_217

    const/4 v5, 0x6

    aget-boolean v2, v2, v5

    if-nez v2, :cond_259

    .line 2178
    :cond_217
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noCrlSigningPermited"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2179
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2151
    :cond_226
    :try_start_226
    new-instance v7, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v8, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v9, "CertPathReviewer.onlineInvalidCRL"

    const/4 v10, 0x3

    new-array v10, v10, [Ljava/lang/Object;

    const/4 v11, 0x0

    new-instance v12, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2153
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getThisUpdate()Ljava/util/Date;

    move-result-object v13

    invoke-direct {v12, v13}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    const/4 v11, 0x1

    new-instance v12, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2154
    invoke-virtual {v4}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v4

    invoke-direct {v12, v4}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v12, v10, v11

    const/4 v4, 0x2

    new-instance v11, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;

    invoke-direct {v11, v2}, Lorg/spongycastle/i18n/filter/UntrustedUrlInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v10, v4

    invoke-direct {v7, v8, v9, v10}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2156
    move/from16 v0, p7

    invoke-virtual {p0, v7, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V
    :try_end_257
    .catch Lorg/spongycastle/x509/CertPathReviewerException; {:try_start_226 .. :try_end_257} :catch_13d

    goto/16 :goto_e3

    .line 2183
    :cond_259
    if-eqz p5, :cond_2da

    .line 2187
    :try_start_25b
    const-string v2, "SC"

    move-object/from16 v0, p5

    invoke-virtual {v3, v0, v2}, Ljava/security/cert/X509CRL;->verify(Ljava/security/PublicKey;Ljava/lang/String;)V
    :try_end_262
    .catch Ljava/lang/Exception; {:try_start_25b .. :try_end_262} :catch_2ca

    .line 2201
    invoke-virtual/range {p2 .. p2}, Ljava/security/cert/X509Certificate;->getSerialNumber()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v3, v2}, Ljava/security/cert/X509CRL;->getRevokedCertificate(Ljava/math/BigInteger;)Ljava/security/cert/X509CRLEntry;

    move-result-object v5

    .line 2202
    if-eqz v5, :cond_3c1

    .line 2204
    const/4 v2, 0x0

    .line 2206
    invoke-virtual {v5}, Ljava/security/cert/X509CRLEntry;->hasExtensions()Z

    move-result v6

    if-eqz v6, :cond_28f

    .line 2211
    :try_start_273
    sget-object v6, Lorg/spongycastle/asn1/x509/X509Extensions;->ReasonCode:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v6}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v6

    invoke-static {v5, v6}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v6

    invoke-static {v6}, Lorg/spongycastle/asn1/ASN1Enumerated;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/ASN1Enumerated;
    :try_end_280
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_273 .. :try_end_280} :catch_2e9

    move-result-object v6

    .line 2218
    if-eqz v6, :cond_28f

    .line 2220
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->crlReasons:[Ljava/lang/String;

    invoke-virtual {v6}, Lorg/spongycastle/asn1/ASN1Enumerated;->getValue()Ljava/math/BigInteger;

    move-result-object v6

    invoke-virtual {v6}, Ljava/math/BigInteger;->intValue()I

    move-result v6

    aget-object v2, v2, v6

    .line 2224
    :cond_28f
    if-nez v2, :cond_296

    .line 2226
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->crlReasons:[Ljava/lang/String;

    const/4 v6, 0x7

    aget-object v2, v2, v6

    .line 2230
    :cond_296
    new-instance v6, Lorg/spongycastle/i18n/LocaleString;

    const-string v7, "org.spongycastle.x509.CertPathReviewerMessages"

    invoke-direct {v6, v7, v2}, Lorg/spongycastle/i18n/LocaleString;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2232
    invoke-virtual {v5}, Ljava/security/cert/X509CRLEntry;->getRevocationDate()Ljava/util/Date;

    move-result-object v2

    move-object/from16 v0, p3

    invoke-virtual {v0, v2}, Ljava/util/Date;->before(Ljava/util/Date;)Z

    move-result v2

    if-nez v2, :cond_2f9

    .line 2234
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.certRevoked"

    const/4 v7, 0x2

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v9, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2235
    invoke-virtual {v5}, Ljava/security/cert/X509CRLEntry;->getRevocationDate()Ljava/util/Date;

    move-result-object v5

    invoke-direct {v9, v5}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    const/4 v5, 0x1

    aput-object v6, v7, v5

    invoke-direct {v2, v3, v4, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2236
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2189
    :catch_2ca
    move-exception v2

    .line 2191
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlVerifyFailed"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2192
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2197
    :cond_2da
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.crlNoIssuerPublicKey"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2198
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2213
    :catch_2e9
    move-exception v2

    .line 2215
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlReasonExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2216
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2240
    :cond_2f9
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v7, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v8, "CertPathReviewer.revokedAfterValidation"

    const/4 v9, 0x2

    new-array v9, v9, [Ljava/lang/Object;

    const/4 v10, 0x0

    new-instance v11, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2241
    invoke-virtual {v5}, Ljava/security/cert/X509CRLEntry;->getRevocationDate()Ljava/util/Date;

    move-result-object v5

    invoke-direct {v11, v5}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v11, v9, v10

    const/4 v5, 0x1

    aput-object v6, v9, v5

    invoke-direct {v2, v7, v8, v9}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2242
    move/from16 v0, p7

    invoke-virtual {p0, v2, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 2254
    :goto_319
    invoke-virtual {v3}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v2

    if-eqz v2, :cond_34c

    invoke-virtual {v3}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v2

    iget-object v5, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-virtual {v5}, Ljava/security/cert/PKIXParameters;->getDate()Ljava/util/Date;

    move-result-object v5

    invoke-virtual {v2, v5}, Ljava/util/Date;->before(Ljava/util/Date;)Z

    move-result v2

    if-eqz v2, :cond_34c

    .line 2256
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.crlUpdateAvailable"

    const/4 v7, 0x1

    new-array v7, v7, [Ljava/lang/Object;

    const/4 v8, 0x0

    new-instance v9, Lorg/spongycastle/i18n/filter/TrustedInput;

    .line 2257
    invoke-virtual {v3}, Ljava/security/cert/X509CRL;->getNextUpdate()Ljava/util/Date;

    move-result-object v10

    invoke-direct {v9, v10}, Lorg/spongycastle/i18n/filter/TrustedInput;-><init>(Ljava/lang/Object;)V

    aput-object v9, v7, v8

    invoke-direct {v2, v5, v6, v7}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;[Ljava/lang/Object;)V

    .line 2258
    move/from16 v0, p7

    invoke-virtual {p0, v2, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    .line 2267
    :cond_34c
    :try_start_34c
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;

    invoke-static {v3, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;
    :try_end_351
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_34c .. :try_end_351} :catch_3d1

    move-result-object v5

    .line 2277
    :try_start_352
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->DELTA_CRL_INDICATOR:Ljava/lang/String;

    invoke-static {v3, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;
    :try_end_357
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_352 .. :try_end_357} :catch_3e1

    move-result-object v2

    .line 2285
    if-eqz v2, :cond_43a

    .line 2287
    new-instance v6, Lorg/spongycastle/x509/X509CRLStoreSelector;

    invoke-direct {v6}, Lorg/spongycastle/x509/X509CRLStoreSelector;-><init>()V

    .line 2291
    :try_start_35f
    invoke-static {v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getIssuerPrincipal(Ljava/security/cert/X509CRL;)Ljavax/security/auth/x500/X500Principal;

    move-result-object v7

    invoke-virtual {v7}, Ljavax/security/auth/x500/X500Principal;->getEncoded()[B

    move-result-object v7

    invoke-virtual {v6, v7}, Lorg/spongycastle/x509/X509CRLStoreSelector;->addIssuerName([B)V
    :try_end_36a
    .catch Ljava/io/IOException; {:try_start_35f .. :try_end_36a} :catch_3f1

    .line 2299
    check-cast v2, Lorg/spongycastle/asn1/ASN1Integer;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getPositiveValue()Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v6, v2}, Lorg/spongycastle/x509/X509CRLStoreSelector;->setMinCRLNumber(Ljava/math/BigInteger;)V

    .line 2302
    :try_start_373
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_NUMBER:Ljava/lang/String;

    invoke-static {v3, v2}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v2

    check-cast v2, Lorg/spongycastle/asn1/ASN1Integer;

    invoke-virtual {v2}, Lorg/spongycastle/asn1/ASN1Integer;->getPositiveValue()Ljava/math/BigInteger;

    move-result-object v2

    const-wide/16 v8, 0x1

    invoke-static {v8, v9}, Ljava/math/BigInteger;->valueOf(J)Ljava/math/BigInteger;

    move-result-object v3

    invoke-virtual {v2, v3}, Ljava/math/BigInteger;->subtract(Ljava/math/BigInteger;)Ljava/math/BigInteger;

    move-result-object v2

    invoke-virtual {v6, v2}, Lorg/spongycastle/x509/X509CRLStoreSelector;->setMaxCRLNumber(Ljava/math/BigInteger;)V
    :try_end_38c
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_373 .. :try_end_38c} :catch_401

    .line 2310
    const/4 v3, 0x0

    .line 2314
    :try_start_38d
    sget-object v2, Lorg/spongycastle/x509/PKIXCertPathReviewer;->CRL_UTIL:Lorg/spongycastle/x509/PKIXCRLUtil;

    move-object/from16 v0, p1

    invoke-virtual {v2, v6, v0}, Lorg/spongycastle/x509/PKIXCRLUtil;->findCRLs(Lorg/spongycastle/x509/X509CRLStoreSelector;Ljava/security/cert/PKIXParameters;)Ljava/util/Set;

    move-result-object v2

    invoke-interface {v2}, Ljava/util/Set;->iterator()Ljava/util/Iterator;
    :try_end_398
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_38d .. :try_end_398} :catch_411

    move-result-object v6

    .line 2321
    :cond_399
    invoke-interface {v6}, Ljava/util/Iterator;->hasNext()Z

    move-result v2

    if-eqz v2, :cond_4bd

    .line 2323
    invoke-interface {v6}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v2

    check-cast v2, Ljava/security/cert/X509CRL;

    .line 2328
    :try_start_3a5
    sget-object v7, Lorg/spongycastle/x509/PKIXCertPathReviewer;->ISSUING_DISTRIBUTION_POINT:Ljava/lang/String;

    invoke-static {v2, v7}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;
    :try_end_3aa
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_3a5 .. :try_end_3aa} :catch_421

    move-result-object v2

    .line 2336
    if-nez v5, :cond_431

    .line 2338
    if-nez v2, :cond_399

    .line 2340
    const/4 v2, 0x1

    .line 2354
    :goto_3b0
    if-nez v2, :cond_43a

    .line 2356
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noBaseCRL"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2357
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2247
    :cond_3c1
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v5, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v6, "CertPathReviewer.notRevoked"

    invoke-direct {v2, v5, v6}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2248
    move/from16 v0, p7

    invoke-virtual {p0, v2, v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->addNotification(Lorg/spongycastle/i18n/ErrorBundle;I)V

    goto/16 :goto_319

    .line 2271
    :catch_3d1
    move-exception v2

    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.distrPtExtError"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2272
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2281
    :catch_3e1
    move-exception v2

    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.deltaCrlExtError"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2282
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2293
    :catch_3f1
    move-exception v2

    .line 2295
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlIssuerException"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2296
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2304
    :catch_401
    move-exception v2

    .line 2306
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlNbrExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2307
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2316
    :catch_411
    move-exception v2

    .line 2318
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlExtractionError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2319
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2330
    :catch_421
    move-exception v2

    .line 2332
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.distrPtExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2333
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2346
    :cond_431
    invoke-virtual {v5, v2}, Lorg/spongycastle/asn1/ASN1Primitive;->equals(Ljava/lang/Object;)Z

    move-result v2

    if-eqz v2, :cond_399

    .line 2348
    const/4 v2, 0x1

    .line 2349
    goto/16 :goto_3b0

    .line 2361
    :cond_43a
    if-eqz v5, :cond_4ab

    .line 2363
    invoke-static {v5}, Lorg/spongycastle/asn1/x509/IssuingDistributionPoint;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/IssuingDistributionPoint;

    move-result-object v2

    .line 2367
    :try_start_440
    sget-object v3, Lorg/spongycastle/x509/PKIXCertPathReviewer;->BASIC_CONSTRAINTS:Ljava/lang/String;

    move-object/from16 v0, p2

    invoke-static {v0, v3}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getExtensionValue(Ljava/security/cert/X509Extension;Ljava/lang/String;)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v3

    invoke-static {v3}, Lorg/spongycastle/asn1/x509/BasicConstraints;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/BasicConstraints;
    :try_end_44b
    .catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_440 .. :try_end_44b} :catch_469

    move-result-object v3

    .line 2375
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/IssuingDistributionPoint;->onlyContainsUserCerts()Z

    move-result v5

    if-eqz v5, :cond_479

    if-eqz v3, :cond_479

    invoke-virtual {v3}, Lorg/spongycastle/asn1/x509/BasicConstraints;->isCA()Z

    move-result v5

    if-eqz v5, :cond_479

    .line 2377
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.crlOnlyUserCert"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2378
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2369
    :catch_469
    move-exception v2

    .line 2371
    new-instance v3, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v4, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v5, "CertPathReviewer.crlBCExtError"

    invoke-direct {v3, v4, v5}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2372
    new-instance v4, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v4, v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;Ljava/lang/Throwable;)V

    throw v4

    .line 2381
    :cond_479
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/IssuingDistributionPoint;->onlyContainsCACerts()Z

    move-result v5

    if-eqz v5, :cond_496

    if-eqz v3, :cond_487

    invoke-virtual {v3}, Lorg/spongycastle/asn1/x509/BasicConstraints;->isCA()Z

    move-result v3

    if-nez v3, :cond_496

    .line 2383
    :cond_487
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.crlOnlyCaCert"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2384
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2387
    :cond_496
    invoke-virtual {v2}, Lorg/spongycastle/asn1/x509/IssuingDistributionPoint;->onlyContainsAttributeCerts()Z

    move-result v2

    if-eqz v2, :cond_4ab

    .line 2389
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.crlOnlyAttrCert"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2390
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2395
    :cond_4ab
    if-nez v4, :cond_4bc

    .line 2397
    new-instance v2, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v3, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v4, "CertPathReviewer.noValidCrlFound"

    invoke-direct {v2, v3, v4}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2398
    new-instance v3, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v3, v2}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v3

    .line 2401
    :cond_4bc
    return-void

    :cond_4bd
    move v2, v3

    goto/16 :goto_3b0

    :cond_4c0
    move v4, v3

    move-object v3, v5

    goto/16 :goto_204

    :cond_4c4
    move-object v3, v5

    move v4, v2

    goto/16 :goto_204

    :cond_4c8
    move-object v5, v2

    move v2, v4

    goto/16 :goto_dc
.end method

.method protected checkRevocation(Ljava/security/cert/PKIXParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Vector;Ljava/util/Vector;I)V
    .registers 17

    .prologue
    .line 2024
    move-object v0, p0

    move-object v1, p1

    move-object v2, p2

    move-object v3, p3

    move-object v4, p4

    move-object v5, p5

    move-object v6, p6

    move/from16 v7, p8

    invoke-virtual/range {v0 .. v7}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkCRLs(Ljava/security/cert/PKIXParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/security/cert/X509Certificate;Ljava/security/PublicKey;Ljava/util/Vector;I)V

    .line 2025
    return-void
.end method

.method protected doChecks()V
    .registers 4

    .prologue
    .line 348
    iget-boolean v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->initialized:Z

    if-nez v0, :cond_c

    .line 350
    new-instance v0, Ljava/lang/IllegalStateException;

    const-string v1, "Object not initialized. Call init() first."

    invoke-direct {v0, v1}, Ljava/lang/IllegalStateException;-><init>(Ljava/lang/String;)V

    throw v0

    .line 352
    :cond_c
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    if-nez v0, :cond_4a

    .line 355
    iget v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v0, v0, 0x1

    new-array v0, v0, [Ljava/util/List;

    iput-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    .line 356
    iget v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    add-int/lit8 v0, v0, 0x1

    new-array v0, v0, [Ljava/util/List;

    iput-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    .line 358
    const/4 v0, 0x0

    :goto_21
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    array-length v1, v1

    if-ge v0, v1, :cond_3b

    .line 360
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    new-instance v2, Ljava/util/ArrayList;

    invoke-direct {v2}, Ljava/util/ArrayList;-><init>()V

    aput-object v2, v1, v0

    .line 361
    iget-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    new-instance v2, Ljava/util/ArrayList;

    invoke-direct {v2}, Ljava/util/ArrayList;-><init>()V

    aput-object v2, v1, v0

    .line 358
    add-int/lit8 v0, v0, 0x1

    goto :goto_21

    .line 365
    :cond_3b
    invoke-direct {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkSignatures()V

    .line 368
    invoke-direct {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkNameConstraints()V

    .line 371
    invoke-direct {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkPathLength()V

    .line 374
    invoke-direct {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkPolicy()V

    .line 377
    invoke-direct {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->checkCriticalExtensions()V

    .line 380
    :cond_4a
    return-void
.end method

.method protected getCRLDistUrls(Lorg/spongycastle/asn1/x509/CRLDistPoint;)Ljava/util/Vector;
    .registers 10

    .prologue
    const/4 v2, 0x0

    .line 2405
    new-instance v4, Ljava/util/Vector;

    invoke-direct {v4}, Ljava/util/Vector;-><init>()V

    .line 2407
    if-eqz p1, :cond_4c

    .line 2409
    invoke-virtual {p1}, Lorg/spongycastle/asn1/x509/CRLDistPoint;->getDistributionPoints()[Lorg/spongycastle/asn1/x509/DistributionPoint;

    move-result-object v5

    move v1, v2

    .line 2410
    :goto_d
    array-length v0, v5

    if-ge v1, v0, :cond_4c

    .line 2412
    aget-object v0, v5, v1

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/DistributionPoint;->getDistributionPoint()Lorg/spongycastle/asn1/x509/DistributionPointName;

    move-result-object v0

    .line 2413
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/DistributionPointName;->getType()I

    move-result v3

    if-nez v3, :cond_48

    .line 2415
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/DistributionPointName;->getName()Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v0

    invoke-static {v0}, Lorg/spongycastle/asn1/x509/GeneralNames;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/GeneralNames;

    move-result-object v0

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/GeneralNames;->getNames()[Lorg/spongycastle/asn1/x509/GeneralName;

    move-result-object v6

    move v3, v2

    .line 2416
    :goto_29
    array-length v0, v6

    if-ge v3, v0, :cond_48

    .line 2418
    aget-object v0, v6, v3

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/GeneralName;->getTagNo()I

    move-result v0

    const/4 v7, 0x6

    if-ne v0, v7, :cond_44

    .line 2420
    aget-object v0, v6, v3

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/GeneralName;->getName()Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v0

    check-cast v0, Lorg/spongycastle/asn1/DERIA5String;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/DERIA5String;->getString()Ljava/lang/String;

    move-result-object v0

    .line 2421
    invoke-virtual {v4, v0}, Ljava/util/Vector;->add(Ljava/lang/Object;)Z

    .line 2416
    :cond_44
    add-int/lit8 v0, v3, 0x1

    move v3, v0

    goto :goto_29

    .line 2410
    :cond_48
    add-int/lit8 v0, v1, 0x1

    move v1, v0

    goto :goto_d

    .line 2427
    :cond_4c
    return-object v4
.end method

.method public getCertPath()Ljava/security/cert/CertPath;
    .registers 2

    .prologue
    .line 199
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    return-object v0
.end method

.method public getCertPathSize()I
    .registers 2

    .prologue
    .line 208
    iget v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    return v0
.end method

.method public getErrors(I)Ljava/util/List;
    .registers 4

    .prologue
    .line 234
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 235
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    add-int/lit8 v1, p1, 0x1

    aget-object v0, v0, v1

    return-object v0
.end method

.method public getErrors()[Ljava/util/List;
    .registers 2

    .prologue
    .line 221
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 222
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    return-object v0
.end method

.method public getNotifications(I)Ljava/util/List;
    .registers 4

    .prologue
    .line 261
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 262
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    add-int/lit8 v1, p1, 0x1

    aget-object v0, v0, v1

    return-object v0
.end method

.method public getNotifications()[Ljava/util/List;
    .registers 2

    .prologue
    .line 248
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 249
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    return-object v0
.end method

.method protected getOCSPUrls(Lorg/spongycastle/asn1/x509/AuthorityInformationAccess;)Ljava/util/Vector;
    .registers 8

    .prologue
    .line 2432
    new-instance v2, Ljava/util/Vector;

    invoke-direct {v2}, Ljava/util/Vector;-><init>()V

    .line 2434
    if-eqz p1, :cond_3c

    .line 2436
    invoke-virtual {p1}, Lorg/spongycastle/asn1/x509/AuthorityInformationAccess;->getAccessDescriptions()[Lorg/spongycastle/asn1/x509/AccessDescription;

    move-result-object v3

    .line 2437
    const/4 v0, 0x0

    move v1, v0

    :goto_d
    array-length v0, v3

    if-ge v1, v0, :cond_3c

    .line 2439
    aget-object v0, v3, v1

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/AccessDescription;->getAccessMethod()Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    move-result-object v0

    sget-object v4, Lorg/spongycastle/asn1/x509/AccessDescription;->id_ad_ocsp:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v0, v4}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->equals(Ljava/lang/Object;)Z

    move-result v0

    if-eqz v0, :cond_38

    .line 2441
    aget-object v0, v3, v1

    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/AccessDescription;->getAccessLocation()Lorg/spongycastle/asn1/x509/GeneralName;

    move-result-object v0

    .line 2442
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/GeneralName;->getTagNo()I

    move-result v4

    const/4 v5, 0x6

    if-ne v4, v5, :cond_38

    .line 2444
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/GeneralName;->getName()Lorg/spongycastle/asn1/ASN1Encodable;

    move-result-object v0

    check-cast v0, Lorg/spongycastle/asn1/DERIA5String;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/DERIA5String;->getString()Ljava/lang/String;

    move-result-object v0

    .line 2445
    invoke-virtual {v2, v0}, Ljava/util/Vector;->add(Ljava/lang/Object;)Z

    .line 2437
    :cond_38
    add-int/lit8 v0, v1, 0x1

    move v1, v0

    goto :goto_d

    .line 2451
    :cond_3c
    return-object v2
.end method

.method public getPolicyTree()Ljava/security/cert/PolicyNode;
    .registers 2

    .prologue
    .line 272
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 273
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->policyTree:Ljava/security/cert/PolicyNode;

    return-object v0
.end method

.method public getSubjectPublicKey()Ljava/security/PublicKey;
    .registers 2

    .prologue
    .line 283
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 284
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->subjectPublicKey:Ljava/security/PublicKey;

    return-object v0
.end method

.method public getTrustAnchor()Ljava/security/cert/TrustAnchor;
    .registers 2

    .prologue
    .line 294
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 295
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->trustAnchor:Ljava/security/cert/TrustAnchor;

    return-object v0
.end method

.method protected getTrustAnchors(Ljava/security/cert/X509Certificate;Ljava/util/Set;)Ljava/util/Collection;
    .registers 10

    .prologue
    .line 2492
    new-instance v1, Ljava/util/ArrayList;

    invoke-direct {v1}, Ljava/util/ArrayList;-><init>()V

    .line 2493
    invoke-interface {p2}, Ljava/util/Set;->iterator()Ljava/util/Iterator;

    move-result-object v2

    .line 2495
    new-instance v3, Ljava/security/cert/X509CertSelector;

    invoke-direct {v3}, Ljava/security/cert/X509CertSelector;-><init>()V

    .line 2499
    :try_start_e
    invoke-static {p1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getEncodedIssuerPrincipal(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;

    move-result-object v0

    invoke-virtual {v0}, Ljavax/security/auth/x500/X500Principal;->getEncoded()[B

    move-result-object v0

    invoke-virtual {v3, v0}, Ljava/security/cert/X509CertSelector;->setSubject([B)V

    .line 2500
    sget-object v0, Lorg/spongycastle/asn1/x509/X509Extensions;->AuthorityKeyIdentifier:Lorg/spongycastle/asn1/ASN1ObjectIdentifier;

    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1ObjectIdentifier;->getId()Ljava/lang/String;

    move-result-object v0

    invoke-virtual {p1, v0}, Ljava/security/cert/X509Certificate;->getExtensionValue(Ljava/lang/String;)[B

    move-result-object v0

    .line 2502
    if-eqz v0, :cond_50

    .line 2504
    invoke-static {v0}, Lorg/spongycastle/asn1/ASN1Primitive;->fromByteArray([B)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v0

    check-cast v0, Lorg/spongycastle/asn1/ASN1OctetString;

    .line 2505
    invoke-virtual {v0}, Lorg/spongycastle/asn1/ASN1OctetString;->getOctets()[B

    move-result-object v0

    invoke-static {v0}, Lorg/spongycastle/asn1/ASN1Primitive;->fromByteArray([B)Lorg/spongycastle/asn1/ASN1Primitive;

    move-result-object v0

    invoke-static {v0}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getInstance(Ljava/lang/Object;)Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;

    move-result-object v0

    .line 2507
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getAuthorityCertSerialNumber()Ljava/math/BigInteger;

    move-result-object v4

    invoke-virtual {v3, v4}, Ljava/security/cert/X509CertSelector;->setSerialNumber(Ljava/math/BigInteger;)V

    .line 2508
    invoke-virtual {v0}, Lorg/spongycastle/asn1/x509/AuthorityKeyIdentifier;->getKeyIdentifier()[B

    move-result-object v0

    .line 2509
    if-eqz v0, :cond_50

    .line 2511
    new-instance v4, Lorg/spongycastle/asn1/DEROctetString;

    invoke-direct {v4, v0}, Lorg/spongycastle/asn1/DEROctetString;-><init>([B)V

    invoke-virtual {v4}, Lorg/spongycastle/asn1/DEROctetString;->getEncoded()[B

    move-result-object v0

    invoke-virtual {v3, v0}, Ljava/security/cert/X509CertSelector;->setSubjectKeyIdentifier([B)V
    :try_end_50
    .catch Ljava/io/IOException; {:try_start_e .. :try_end_50} :catch_70

    .line 2521
    :cond_50
    :goto_50
    invoke-interface {v2}, Ljava/util/Iterator;->hasNext()Z

    move-result v0

    if-eqz v0, :cond_a3

    .line 2523
    invoke-interface {v2}, Ljava/util/Iterator;->next()Ljava/lang/Object;

    move-result-object v0

    check-cast v0, Ljava/security/cert/TrustAnchor;

    .line 2524
    invoke-virtual {v0}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v4

    if-eqz v4, :cond_80

    .line 2526
    invoke-virtual {v0}, Ljava/security/cert/TrustAnchor;->getTrustedCert()Ljava/security/cert/X509Certificate;

    move-result-object v4

    invoke-virtual {v3, v4}, Ljava/security/cert/X509CertSelector;->match(Ljava/security/cert/Certificate;)Z

    move-result v4

    if-eqz v4, :cond_50

    .line 2528
    invoke-interface {v1, v0}, Ljava/util/Collection;->add(Ljava/lang/Object;)Z

    goto :goto_50

    .line 2517
    :catch_70
    move-exception v0

    new-instance v0, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v1, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v2, "CertPathReviewer.trustAnchorIssuerError"

    invoke-direct {v0, v1, v2}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    .line 2518
    new-instance v1, Lorg/spongycastle/x509/CertPathReviewerException;

    invoke-direct {v1, v0}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v1

    .line 2531
    :cond_80
    invoke-virtual {v0}, Ljava/security/cert/TrustAnchor;->getCAName()Ljava/lang/String;

    move-result-object v4

    if-eqz v4, :cond_50

    invoke-virtual {v0}, Ljava/security/cert/TrustAnchor;->getCAPublicKey()Ljava/security/PublicKey;

    move-result-object v4

    if-eqz v4, :cond_50

    .line 2533
    invoke-static {p1}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getEncodedIssuerPrincipal(Ljava/lang/Object;)Ljavax/security/auth/x500/X500Principal;

    move-result-object v4

    .line 2534
    new-instance v5, Ljavax/security/auth/x500/X500Principal;

    invoke-virtual {v0}, Ljava/security/cert/TrustAnchor;->getCAName()Ljava/lang/String;

    move-result-object v6

    invoke-direct {v5, v6}, Ljavax/security/auth/x500/X500Principal;-><init>(Ljava/lang/String;)V

    .line 2535
    invoke-virtual {v4, v5}, Ljavax/security/auth/x500/X500Principal;->equals(Ljava/lang/Object;)Z

    move-result v4

    if-eqz v4, :cond_50

    .line 2537
    invoke-interface {v1, v0}, Ljava/util/Collection;->add(Ljava/lang/Object;)Z

    goto :goto_50

    .line 2541
    :cond_a3
    return-object v1
.end method

.method public init(Ljava/security/cert/CertPath;Ljava/security/cert/PKIXParameters;)V
    .registers 7

    .prologue
    const/4 v1, 0x0

    .line 127
    iget-boolean v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->initialized:Z

    if-eqz v0, :cond_d

    .line 129
    new-instance v0, Ljava/lang/IllegalStateException;

    const-string v1, "object is already initialized!"

    invoke-direct {v0, v1}, Ljava/lang/IllegalStateException;-><init>(Ljava/lang/String;)V

    throw v0

    .line 131
    :cond_d
    const/4 v0, 0x1

    iput-boolean v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->initialized:Z

    .line 134
    if-nez p1, :cond_1a

    .line 136
    new-instance v0, Ljava/lang/NullPointerException;

    const-string v1, "certPath was null"

    invoke-direct {v0, v1}, Ljava/lang/NullPointerException;-><init>(Ljava/lang/String;)V

    throw v0

    .line 138
    :cond_1a
    iput-object p1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certPath:Ljava/security/cert/CertPath;

    .line 140
    invoke-virtual {p1}, Ljava/security/cert/CertPath;->getCertificates()Ljava/util/List;

    move-result-object v0

    iput-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    .line 141
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0}, Ljava/util/List;->size()I

    move-result v0

    iput v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->n:I

    .line 142
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->certs:Ljava/util/List;

    invoke-interface {v0}, Ljava/util/List;->isEmpty()Z

    move-result v0

    if-eqz v0, :cond_41

    .line 144
    new-instance v0, Lorg/spongycastle/x509/CertPathReviewerException;

    new-instance v1, Lorg/spongycastle/i18n/ErrorBundle;

    const-string v2, "org.spongycastle.x509.CertPathReviewerMessages"

    const-string v3, "CertPathReviewer.emptyCertPath"

    invoke-direct {v1, v2, v3}, Lorg/spongycastle/i18n/ErrorBundle;-><init>(Ljava/lang/String;Ljava/lang/String;)V

    invoke-direct {v0, v1}, Lorg/spongycastle/x509/CertPathReviewerException;-><init>(Lorg/spongycastle/i18n/ErrorBundle;)V

    throw v0

    .line 148
    :cond_41
    invoke-virtual {p2}, Ljava/security/cert/PKIXParameters;->clone()Ljava/lang/Object;

    move-result-object v0

    check-cast v0, Ljava/security/cert/PKIXParameters;

    iput-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    .line 156
    iget-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->pkixParams:Ljava/security/cert/PKIXParameters;

    invoke-static {v0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->getValidDate(Ljava/security/cert/PKIXParameters;)Ljava/util/Date;

    move-result-object v0

    iput-object v0, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->validDate:Ljava/util/Date;

    .line 166
    iput-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->notifications:[Ljava/util/List;

    .line 167
    iput-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    .line 168
    iput-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->trustAnchor:Ljava/security/cert/TrustAnchor;

    .line 169
    iput-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->subjectPublicKey:Ljava/security/PublicKey;

    .line 170
    iput-object v1, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->policyTree:Ljava/security/cert/PolicyNode;

    .line 171
    return-void
.end method

.method public isValidCertPath()Z
    .registers 5

    .prologue
    const/4 v1, 0x0

    .line 305
    invoke-virtual {p0}, Lorg/spongycastle/x509/PKIXCertPathReviewer;->doChecks()V

    .line 306
    const/4 v2, 0x1

    move v0, v1

    .line 307
    :goto_6
    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    array-length v3, v3

    if-ge v0, v3, :cond_19

    .line 309
    iget-object v3, p0, Lorg/spongycastle/x509/PKIXCertPathReviewer;->errors:[Ljava/util/List;

    aget-object v3, v3, v0

    invoke-interface {v3}, Ljava/util/List;->isEmpty()Z

    move-result v3

    if-nez v3, :cond_16

    .line 315
    :goto_15
    return v1

    .line 307
    :cond_16
    add-int/lit8 v0, v0, 0x1

    goto :goto_6

    :cond_19
    move v1, v2

    goto :goto_15
.end method