/*
 * Copyright (C) 2013 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package libcore.java.security.cert;

import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.security.InvalidAlgorithmParameterException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertPath;
import java.security.cert.CertPathValidator;
import java.security.cert.CertPathValidatorException;
import java.security.cert.CertStore;
import java.security.cert.CertificateFactory;
import java.security.cert.CollectionCertStoreParameters;
import java.security.cert.PKIXCertPathValidatorResult;
import java.security.cert.PKIXParameters;
import java.security.cert.TrustAnchor;
import java.security.cert.X509CRL;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Calendar;
import java.util.Collection;
import java.util.Collections;
import java.util.Date;
import java.util.HashSet;
import java.util.Set;
import java.util.TimeZone;

import junit.framework.TestCase;

public class X509CertificateNistPkitsTest extends TestCase {
    public static final String ANY_POLICY_OID = "2.5.29.32.0";
    public static final String RESOURCE_PACKAGE = "/tests/resources/";

    /*
     * All the certificates in this test should be verified with the same date.
     * Since none of the built-in roots-of-trust (CA cerificates) are needed,
     * it should be safe to set this to a fixed date until the certificates
     * in the tests are updated.
     */
    private static final Date TEST_DATE;
    static {
        Calendar cal = Calendar.getInstance(TimeZone.getTimeZone("UTC"));
        cal.set(2015, 0, 1);
        TEST_DATE = cal.getTime();
    }

    public static InputStream getStream(String name) {
        // If we have the resources packaged up in our jar file, get them that way.
        String path = RESOURCE_PACKAGE + name;
        InputStream result = X509CertificateNistPkitsTest.class.getResourceAsStream(path);
        if (result != null) {
            return result;
        }
        // Otherwise, if we're in an Android build tree, get the files directly.
        String ANDROID_BUILD_TOP = System.getenv("ANDROID_BUILD_TOP");
        if (ANDROID_BUILD_TOP != null) {
            File resource = new File(ANDROID_BUILD_TOP + "/external/nist-pkits/res" + path);
            if (resource.exists()) {
                try {
                    return new FileInputStream(resource);
                } catch (IOException ex) {
                    throw new IllegalArgumentException("Couldn't open: " + resource, ex);
                }
            }
        }
        throw new IllegalArgumentException("No such resource: " + path);
    }

    private final X509Certificate getCertificate(CertificateFactory f, String name)
            throws Exception {
        final String fileName = "nist-pkits/certs/" + name;
        final InputStream is = getStream(fileName);
        assertNotNull("File does not exist: " + fileName, is);
        try {
            return (X509Certificate) f.generateCertificate(is);
        } finally {
            try {
                is.close();
            } catch (IOException ignored) {
            }
        }
    }

    private final X509Certificate[] getCertificates(CertificateFactory f, String[] names)
            throws Exception {
        X509Certificate[] certs = new X509Certificate[names.length];

        for (int i = 0; i < names.length; i++) {
            certs[i] = getCertificate(f, names[i]);
        }

        return certs;
    }

    private final X509CRL getCRL(CertificateFactory f, String name) throws Exception {
        final String fileName = "nist-pkits/crls/" + name;
        final InputStream is = getStream(fileName);
        assertNotNull("File does not exist: " + fileName, is);
        try {
            return (X509CRL) f.generateCRL(is);
        } finally {
            try {
                is.close();
            } catch (IOException ignored) {
            }
        }
    }

    private final X509CRL[] getCRLs(CertificateFactory f, String[] names) throws Exception {
        X509CRL[] crls = new X509CRL[names.length];

        for (int i = 0; i < names.length; i++) {
            crls[i] = getCRL(f, names[i]);
        }

        return crls;
    }

    private CertPath getTestPath(CertificateFactory f, String[] pathCerts) throws Exception {
        X509Certificate[] certs = getCertificates(f, pathCerts);
        return f.generateCertPath(Arrays.asList(certs));
    }

    private PKIXParameters getTestPathParams(CertificateFactory f, String trustedCAName,
            String[] pathCerts, String[] pathCRLs) throws Exception {
        X509Certificate[] certs = getCertificates(f, pathCerts);
        X509CRL[] crls = getCRLs(f, pathCRLs);
        X509Certificate trustedCA = getCertificate(f, trustedCAName);

        Collection<Object> certCollection = new ArrayList<Object>();
        certCollection.addAll(Arrays.asList(crls));
        certCollection.addAll(Arrays.asList(certs));
        certCollection.add(trustedCA);
        CollectionCertStoreParameters certStoreParams = new CollectionCertStoreParameters(
                certCollection);
        CertStore certStore = CertStore.getInstance("Collection", certStoreParams);

        Set<TrustAnchor> anchors = new HashSet<TrustAnchor>();
        anchors.add(new TrustAnchor(trustedCA, null));

        PKIXParameters params = new PKIXParameters(anchors);
        params.addCertStore(certStore);
        params.setExplicitPolicyRequired(false);
        params.setInitialPolicies(Collections.singleton(ANY_POLICY_OID));
        params.setPolicyMappingInhibited(false);
        params.setAnyPolicyInhibited(false);
        params.setDate(TEST_DATE);

        return params;
    }

    private void assertInvalidPath(String trustAnchor, String[] certs, String[] crls)
            throws Exception, NoSuchAlgorithmException, InvalidAlgorithmParameterException {
        assertInvalidPath(trustAnchor, certs, certs, crls);
    }

    private void assertInvalidPath(String trustAnchor, String[] path, String[] certs,
            String[] crls) throws Exception, NoSuchAlgorithmException,
            InvalidAlgorithmParameterException {
        CertificateFactory f = CertificateFactory.getInstance("X.509");

        PKIXParameters params = getTestPathParams(f, trustAnchor, certs, crls);
        CertPath cp = getTestPath(f, certs);
        CertPathValidator cpv = CertPathValidator.getInstance("PKIX");

        try {
            PKIXCertPathValidatorResult cpvResult = (PKIXCertPathValidatorResult) cpv.validate(cp,
                    params);
            fail();
        } catch (CertPathValidatorException expected) {
        }
    }

    private void assertValidPath(String trustAnchor, String[] certs, String[] crls)
            throws Exception, NoSuchAlgorithmException, CertPathValidatorException,
            InvalidAlgorithmParameterException {
        assertValidPath(trustAnchor, certs, certs, crls);
    }

    private void assertValidPath(String trustAnchor, String[] path, String[] certs, String[] crls)
            throws Exception, NoSuchAlgorithmException, CertPathValidatorException,
            InvalidAlgorithmParameterException {
        CertificateFactory f = CertificateFactory.getInstance("X.509");

        PKIXParameters params = getTestPathParams(f, trustAnchor, certs, crls);
        CertPath cp = getTestPath(f, path);
        CertPathValidator cpv = CertPathValidator.getInstance("PKIX");

        PKIXCertPathValidatorResult cpvResult = (PKIXCertPathValidatorResult) cpv.validate(cp,
                params);
    }

    /* DO NOT MANUALLY EDIT -- BEGIN AUTOMATICALLY GENERATED TESTS */
    /** NIST PKITS test 4.1.1 */
    public void testSignatureVerification_ValidSignaturesTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidCertificatePathTest1EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.1.2 */
    public void testSignatureVerification_InvalidCASignatureTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidCASignatureTest2EE.crt",
                "BadSignedCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BadSignedCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.1.3 */
    public void testSignatureVerification_InvalidEESignatureTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidEESignatureTest3EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.1.4 */
    public void testSignatureVerification_ValidDSASignaturesTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDSASignaturesTest4EE.crt",
                "DSACACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "DSACACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.1.5 */
    public void testSignatureVerification_ValidDSAParameterInheritanceTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDSAParameterInheritanceTest5EE.crt",
                "DSAParametersInheritedCACert.crt",
                "DSACACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "DSACACRL.crl",
                "DSAParametersInheritedCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.1.6 */
    public void testSignatureVerification_InvalidDSASignatureTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDSASignatureTest6EE.crt",
                "DSACACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "DSACACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.1 */
    public void testValidityPeriods_InvalidCAnotBeforeDateTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidCAnotBeforeDateTest1EE.crt",
                "BadnotBeforeDateCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BadnotBeforeDateCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.2 */
    public void testValidityPeriods_InvalidEEnotBeforeDateTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidEEnotBeforeDateTest2EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.3 */
    public void testValidityPeriods_Validpre2000UTCnotBeforeDateTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "Validpre2000UTCnotBeforeDateTest3EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.4 */
    public void testValidityPeriods_ValidGeneralizedTimenotBeforeDateTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidGeneralizedTimenotBeforeDateTest4EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.5 */
    public void testValidityPeriods_InvalidCAnotAfterDateTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidCAnotAfterDateTest5EE.crt",
                "BadnotAfterDateCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BadnotAfterDateCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.6 */
    public void testValidityPeriods_InvalidEEnotAfterDateTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidEEnotAfterDateTest6EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.7 */
    public void testValidityPeriods_Invalidpre2000UTCEEnotAfterDateTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "Invalidpre2000UTCEEnotAfterDateTest7EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.2.8 */
    public void testValidityPeriods_ValidGeneralizedTimenotAfterDateTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidGeneralizedTimenotAfterDateTest8EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.1 */
    public void testVerifyingNameChaining_InvalidNameChainingEETest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidNameChainingTest1EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.2 */
    public void testVerifyingNameChaining_InvalidNameChainingOrderTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidNameChainingOrderTest2EE.crt",
                "NameOrderingCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "NameOrderCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.3 */
    public void testVerifyingNameChaining_ValidNameChainingWhitespaceTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNameChainingWhitespaceTest3EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.4 */
    public void testVerifyingNameChaining_ValidNameChainingWhitespaceTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNameChainingWhitespaceTest4EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.5 */
    public void testVerifyingNameChaining_ValidNameChainingCapitalizationTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNameChainingCapitalizationTest5EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.6 */
    public void testVerifyingNameChaining_ValidNameChainingUIDsTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNameUIDsTest6EE.crt",
                "UIDCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UIDCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.7 */
    public void testVerifyingNameChaining_ValidRFC3280MandatoryAttributeTypesTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRFC3280MandatoryAttributeTypesTest7EE.crt",
                "RFC3280MandatoryAttributeTypesCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "RFC3280MandatoryAttributeTypesCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.8 */
    public void testVerifyingNameChaining_ValidRFC3280OptionalAttributeTypesTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRFC3280OptionalAttributeTypesTest8EE.crt",
                "RFC3280OptionalAttributeTypesCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "RFC3280OptionalAttributeTypesCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.9 */
    public void testVerifyingNameChaining_ValidUTF8StringEncodedNamesTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidUTF8StringEncodedNamesTest9EE.crt",
                "UTF8StringEncodedNamesCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UTF8StringEncodedNamesCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.10 */
    public void testVerifyingNameChaining_ValidRolloverfromPrintableStringtoUTF8StringTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt",
                "RolloverfromPrintableStringtoUTF8StringCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "RolloverfromPrintableStringtoUTF8StringCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.3.11 */
    public void testVerifyingNameChaining_ValidUTF8StringCaseInsensitiveMatchTest11() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidUTF8StringCaseInsensitiveMatchTest11EE.crt",
                "UTF8StringCaseInsensitiveMatchCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UTF8StringCaseInsensitiveMatchCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.1 */
    public void testBasicCertificateRevocationTests_MissingCRLTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidMissingCRLTest1EE.crt",
                "NoCRLCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.2 */
    public void testBasicCertificateRevocationTests_InvalidRevokedCATest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidRevokedCATest2EE.crt",
                "RevokedsubCACert.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
                "RevokedsubCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.3 */
    public void testBasicCertificateRevocationTests_InvalidRevokedEETest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidRevokedEETest3EE.crt",
                "GoodCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.4 */
    public void testBasicCertificateRevocationTests_InvalidBadCRLSignatureTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBadCRLSignatureTest4EE.crt",
                "BadCRLSignatureCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BadCRLSignatureCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.5 */
    public void testBasicCertificateRevocationTests_InvalidBadCRLIssuerNameTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBadCRLIssuerNameTest5EE.crt",
                "BadCRLIssuerNameCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BadCRLIssuerNameCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.6 */
    public void testBasicCertificateRevocationTests_InvalidWrongCRLTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidWrongCRLTest6EE.crt",
                "WrongCRLCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "WrongCRLCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.7 */
    public void testBasicCertificateRevocationTests_ValidTwoCRLsTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidTwoCRLsTest7EE.crt",
                "TwoCRLsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "TwoCRLsCAGoodCRL.crl",
                "TwoCRLsCABadCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.8 */
    public void testBasicCertificateRevocationTests_InvalidUnknownCRLEntryExtensionTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidUnknownCRLEntryExtensionTest8EE.crt",
                "UnknownCRLEntryExtensionCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UnknownCRLEntryExtensionCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.9 */
    public void testBasicCertificateRevocationTests_InvalidUnknownCRLExtensionTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidUnknownCRLExtensionTest9EE.crt",
                "UnknownCRLExtensionCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UnknownCRLExtensionCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.10 */
    public void testBasicCertificateRevocationTests_InvalidUnknownCRLExtensionTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidUnknownCRLExtensionTest10EE.crt",
                "UnknownCRLExtensionCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "UnknownCRLExtensionCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.11 */
    public void testBasicCertificateRevocationTests_InvalidOldCRLnextUpdateTest11() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidOldCRLnextUpdateTest11EE.crt",
                "OldCRLnextUpdateCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "OldCRLnextUpdateCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.12 */
    public void testBasicCertificateRevocationTests_Invalidpre2000CRLnextUpdateTest12() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "Invalidpre2000CRLnextUpdateTest12EE.crt",
                "pre2000CRLnextUpdateCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pre2000CRLnextUpdateCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.13 */
    public void testBasicCertificateRevocationTests_ValidGeneralizedTimeCRLnextUpdateTest13() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidGeneralizedTimeCRLnextUpdateTest13EE.crt",
                "GeneralizedTimeCRLnextUpdateCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GeneralizedTimeCRLnextUpdateCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.14 */
    public void testBasicCertificateRevocationTests_ValidNegativeSerialNumberTest14() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNegativeSerialNumberTest14EE.crt",
                "NegativeSerialNumberCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "NegativeSerialNumberCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.15 */
    public void testBasicCertificateRevocationTests_InvalidNegativeSerialNumberTest15() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidNegativeSerialNumberTest15EE.crt",
                "NegativeSerialNumberCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "NegativeSerialNumberCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.16 */
    public void testBasicCertificateRevocationTests_ValidLongSerialNumberTest16() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidLongSerialNumberTest16EE.crt",
                "LongSerialNumberCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "LongSerialNumberCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.17 */
    public void testBasicCertificateRevocationTests_ValidLongSerialNumberTest17() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidLongSerialNumberTest17EE.crt",
                "LongSerialNumberCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "LongSerialNumberCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.18 */
    public void testBasicCertificateRevocationTests_InvalidLongSerialNumberTest18() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidLongSerialNumberTest18EE.crt",
                "LongSerialNumberCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "LongSerialNumberCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.4.19 */
    public void testBasicCertificateRevocationTests_ValidSeparateCertificateandCRLKeysTest19() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidSeparateCertificateandCRLKeysTest19EE.crt",
                "SeparateCertificateandCRLKeysCertificateSigningCACert.crt",
        };

        String[] certs = {
                "ValidSeparateCertificateandCRLKeysTest19EE.crt",
                "SeparateCertificateandCRLKeysCRLSigningCert.crt",
                "SeparateCertificateandCRLKeysCertificateSigningCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "SeparateCertificateandCRLKeysCRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.4.20 */
    public void testBasicCertificateRevocationTests_InvalidSeparateCertificateandCRLKeysTest20() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "InvalidSeparateCertificateandCRLKeysTest20EE.crt",
                "SeparateCertificateandCRLKeysCertificateSigningCACert.crt",
        };

        String[] certs = {
                "InvalidSeparateCertificateandCRLKeysTest20EE.crt",
                "SeparateCertificateandCRLKeysCRLSigningCert.crt",
                "SeparateCertificateandCRLKeysCertificateSigningCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "SeparateCertificateandCRLKeysCRL.crl",
        };

        assertInvalidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.4.21 */
    public void testBasicCertificateRevocationTests_InvalidSeparateCertificateandCRLKeysTest21() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "InvalidSeparateCertificateandCRLKeysTest21EE.crt",
                "SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt",
        };

        String[] certs = {
                "InvalidSeparateCertificateandCRLKeysTest21EE.crt",
                "SeparateCertificateandCRLKeysCA2CRLSigningCert.crt",
                "SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "SeparateCertificateandCRLKeysCA2CRL.crl",
        };

        assertInvalidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.5.1 */
    public void testVerifyingPathswithSelfIssuedCertificates_ValidBasicSelfIssuedOldWithNewTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidBasicSelfIssuedOldWithNewTest1EE.crt",
                "BasicSelfIssuedNewKeyOldWithNewCACert.crt",
                "BasicSelfIssuedNewKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedNewKeyCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.5.2 */
    public void testVerifyingPathswithSelfIssuedCertificates_InvalidBasicSelfIssuedOldWithNewTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBasicSelfIssuedOldWithNewTest2EE.crt",
                "BasicSelfIssuedNewKeyOldWithNewCACert.crt",
                "BasicSelfIssuedNewKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedNewKeyCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.5.3 */
    public void testVerifyingPathswithSelfIssuedCertificates_ValidBasicSelfIssuedNewWithOldTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidBasicSelfIssuedNewWithOldTest3EE.crt",
                "BasicSelfIssuedOldKeyNewWithOldCACert.crt",
                "BasicSelfIssuedOldKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedOldKeySelfIssuedCertCRL.crl",
                "BasicSelfIssuedOldKeyCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.5.4 */
    public void testVerifyingPathswithSelfIssuedCertificates_ValidBasicSelfIssuedNewWithOldTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidBasicSelfIssuedNewWithOldTest4EE.crt",
                "BasicSelfIssuedOldKeyCACert.crt",
        };

        String[] certs = {
                "ValidBasicSelfIssuedNewWithOldTest4EE.crt",
                "BasicSelfIssuedOldKeyNewWithOldCACert.crt",
                "BasicSelfIssuedOldKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedOldKeySelfIssuedCertCRL.crl",
                "BasicSelfIssuedOldKeyCACRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.5.5 */
    public void testVerifyingPathswithSelfIssuedCertificates_InvalidBasicSelfIssuedNewWithOldTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBasicSelfIssuedNewWithOldTest5EE.crt",
                "BasicSelfIssuedOldKeyNewWithOldCACert.crt",
                "BasicSelfIssuedOldKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedOldKeySelfIssuedCertCRL.crl",
                "BasicSelfIssuedOldKeyCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.5.6 */
    public void testVerifyingPathswithSelfIssuedCertificates_ValidBasicSelfIssuedCRLSigningKeyTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt",
                "BasicSelfIssuedCRLSigningKeyCACert.crt",
        };

        String[] certs = {
                "ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt",
                "BasicSelfIssuedCRLSigningKeyCRLCert.crt",
                "BasicSelfIssuedCRLSigningKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCACRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.5.7 */
    public void testVerifyingPathswithSelfIssuedCertificates_InvalidBasicSelfIssuedCRLSigningKeyTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt",
                "BasicSelfIssuedCRLSigningKeyCRLCert.crt",
                "BasicSelfIssuedCRLSigningKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.5.8 */
    public void testVerifyingPathswithSelfIssuedCertificates_InvalidBasicSelfIssuedCRLSigningKeyTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt",
                "BasicSelfIssuedCRLSigningKeyCRLCert.crt",
                "BasicSelfIssuedCRLSigningKeyCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl",
                "BasicSelfIssuedCRLSigningKeyCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.1 */
    public void testVerifyingBasicConstraints_InvalidMissingbasicConstraintsTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidMissingbasicConstraintsTest1EE.crt",
                "MissingbasicConstraintsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "MissingbasicConstraintsCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.2 */
    public void testVerifyingBasicConstraints_InvalidcAFalseTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcAFalseTest2EE.crt",
                "basicConstraintsCriticalcAFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "basicConstraintsCriticalcAFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.3 */
    public void testVerifyingBasicConstraints_InvalidcAFalseTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcAFalseTest3EE.crt",
                "basicConstraintsNotCriticalcAFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "basicConstraintsNotCriticalcAFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.4 */
    public void testVerifyingBasicConstraints_ValidbasicConstraintsNotCriticalTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidbasicConstraintsNotCriticalTest4EE.crt",
                "basicConstraintsNotCriticalCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "basicConstraintsNotCriticalCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.5 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest5EE.crt",
                "pathLenConstraint0subCACert.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
                "pathLenConstraint0subCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.6 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest6EE.crt",
                "pathLenConstraint0subCACert.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
                "pathLenConstraint0subCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.7 */
    public void testVerifyingBasicConstraints_ValidpathLenConstraintTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidpathLenConstraintTest7EE.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.8 */
    public void testVerifyingBasicConstraints_ValidpathLenConstraintTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidpathLenConstraintTest8EE.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.9 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest9EE.crt",
                "pathLenConstraint6subsubCA00Cert.crt",
                "pathLenConstraint6subCA0Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA0CRL.crl",
                "pathLenConstraint6subsubCA00CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.10 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest10EE.crt",
                "pathLenConstraint6subsubCA00Cert.crt",
                "pathLenConstraint6subCA0Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA0CRL.crl",
                "pathLenConstraint6subsubCA00CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.11 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest11() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest11EE.crt",
                "pathLenConstraint6subsubsubCA11XCert.crt",
                "pathLenConstraint6subsubCA11Cert.crt",
                "pathLenConstraint6subCA1Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA1CRL.crl",
                "pathLenConstraint6subsubCA11CRL.crl",
                "pathLenConstraint6subsubsubCA11XCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.12 */
    public void testVerifyingBasicConstraints_InvalidpathLenConstraintTest12() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidpathLenConstraintTest12EE.crt",
                "pathLenConstraint6subsubsubCA11XCert.crt",
                "pathLenConstraint6subsubCA11Cert.crt",
                "pathLenConstraint6subCA1Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA1CRL.crl",
                "pathLenConstraint6subsubCA11CRL.crl",
                "pathLenConstraint6subsubsubCA11XCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.13 */
    public void testVerifyingBasicConstraints_ValidpathLenConstraintTest13() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidpathLenConstraintTest13EE.crt",
                "pathLenConstraint6subsubsubCA41XCert.crt",
                "pathLenConstraint6subsubCA41Cert.crt",
                "pathLenConstraint6subCA4Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA4CRL.crl",
                "pathLenConstraint6subsubCA41CRL.crl",
                "pathLenConstraint6subsubsubCA41XCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.14 */
    public void testVerifyingBasicConstraints_ValidpathLenConstraintTest14() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidpathLenConstraintTest14EE.crt",
                "pathLenConstraint6subsubsubCA41XCert.crt",
                "pathLenConstraint6subsubCA41Cert.crt",
                "pathLenConstraint6subCA4Cert.crt",
                "pathLenConstraint6CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint6CACRL.crl",
                "pathLenConstraint6subCA4CRL.crl",
                "pathLenConstraint6subsubCA41CRL.crl",
                "pathLenConstraint6subsubsubCA41XCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.15 */
    public void testVerifyingBasicConstraints_ValidSelfIssuedpathLenConstraintTest15() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidSelfIssuedpathLenConstraintTest15EE.crt",
                "pathLenConstraint0SelfIssuedCACert.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.16 */
    public void testVerifyingBasicConstraints_InvalidSelfIssuedpathLenConstraintTest16() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidSelfIssuedpathLenConstraintTest16EE.crt",
                "pathLenConstraint0subCA2Cert.crt",
                "pathLenConstraint0SelfIssuedCACert.crt",
                "pathLenConstraint0CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint0CACRL.crl",
                "pathLenConstraint0subCA2CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.6.17 */
    public void testVerifyingBasicConstraints_ValidSelfIssuedpathLenConstraintTest17() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidSelfIssuedpathLenConstraintTest17EE.crt",
                "pathLenConstraint1SelfIssuedsubCACert.crt",
                "pathLenConstraint1subCACert.crt",
                "pathLenConstraint1SelfIssuedCACert.crt",
                "pathLenConstraint1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "pathLenConstraint1CACRL.crl",
                "pathLenConstraint1subCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.7.1 */
    public void testKeyUsage_InvalidkeyUsageCriticalkeyCertSignFalseTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt",
                "keyUsageCriticalkeyCertSignFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "keyUsageCriticalkeyCertSignFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.7.2 */
    public void testKeyUsage_InvalidkeyUsageNotCriticalkeyCertSignFalseTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt",
                "keyUsageNotCriticalkeyCertSignFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "keyUsageNotCriticalkeyCertSignFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.7.3 */
    public void testKeyUsage_ValidkeyUsageNotCriticalTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidkeyUsageNotCriticalTest3EE.crt",
                "keyUsageNotCriticalCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "keyUsageNotCriticalCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.7.4 */
    public void testKeyUsage_InvalidkeyUsageCriticalcRLSignFalseTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt",
                "keyUsageCriticalcRLSignFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "keyUsageCriticalcRLSignFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.7.5 */
    public void testKeyUsage_InvalidkeyUsageNotCriticalcRLSignFalseTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt",
                "keyUsageNotCriticalcRLSignFalseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "keyUsageNotCriticalcRLSignFalseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    // skipping sections 4.8 to 4.12

    /** NIST PKITS test 4.13.1 */
    public void testKeyUsage_ValidDNnameConstraintsTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest1EE.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.2 */
    public void testKeyUsage_InvalidDNnameConstraintsTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest2EE.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.3 */
    public void testKeyUsage_InvalidDNnameConstraintsTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest3EE.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.4 */
    public void testKeyUsage_ValidDNnameConstraintsTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest4EE.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.5 */
    public void testKeyUsage_ValidDNnameConstraintsTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest5EE.crt",
                "nameConstraintsDN2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN2CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.6 */
    public void testKeyUsage_ValidDNnameConstraintsTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest6EE.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.7 */
    public void testKeyUsage_InvalidDNnameConstraintsTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest7EE.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.8 */
    public void testKeyUsage_InvalidDNnameConstraintsTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest8EE.crt",
                "nameConstraintsDN4CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN4CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.9 */
    public void testKeyUsage_InvalidDNnameConstraintsTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest9EE.crt",
                "nameConstraintsDN4CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN4CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.10 */
    public void testKeyUsage_InvalidDNnameConstraintsTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest10EE.crt",
                "nameConstraintsDN5CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN5CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.11 */
    public void testKeyUsage_ValidDNnameConstraintsTest11() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest11EE.crt",
                "nameConstraintsDN5CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN5CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.12 */
    public void testKeyUsage_InvalidDNnameConstraintsTest12() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest12EE.crt",
                "nameConstraintsDN1subCA1Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.13 */
    public void testKeyUsage_InvalidDNnameConstraintsTest13() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest13EE.crt",
                "nameConstraintsDN1subCA2Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA2CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.14 */
    public void testKeyUsage_ValidDNnameConstraintsTest14() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest14EE.crt",
                "nameConstraintsDN1subCA2Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA2CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.15 */
    public void testKeyUsage_InvalidDNnameConstraintsTest15() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest15EE.crt",
                "nameConstraintsDN3subCA1Cert.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
                "nameConstraintsDN3subCA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.16 */
    public void testKeyUsage_InvalidDNnameConstraintsTest16() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest16EE.crt",
                "nameConstraintsDN3subCA1Cert.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
                "nameConstraintsDN3subCA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.17 */
    public void testKeyUsage_InvalidDNnameConstraintsTest17() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest17EE.crt",
                "nameConstraintsDN3subCA2Cert.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
                "nameConstraintsDN3subCA2CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.18 */
    public void testKeyUsage_ValidDNnameConstraintsTest18() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest18EE.crt",
                "nameConstraintsDN3subCA2Cert.crt",
                "nameConstraintsDN3CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN3CACRL.crl",
                "nameConstraintsDN3subCA2CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.19 */
    public void testKeyUsage_ValidSelfIssuedDNnameConstraintsTest19() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNnameConstraintsTest19EE.crt",
                "nameConstraintsDN1SelfIssuedCACert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.20 */
    public void testKeyUsage_InvalidSelfIssuedDNnameConstraintsTest20() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNnameConstraintsTest20EE.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.21 */
    public void testKeyUsage_ValidRFC822nameConstraintsTest21() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRFC822nameConstraintsTest21EE.crt",
                "nameConstraintsRFC822CA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA1CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.22 */
    public void testKeyUsage_InvalidRFC822nameConstraintsTest22() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidRFC822nameConstraintsTest22EE.crt",
                "nameConstraintsRFC822CA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.23 */
    public void testKeyUsage_ValidRFC822nameConstraintsTest23() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRFC822nameConstraintsTest23EE.crt",
                "nameConstraintsRFC822CA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA2CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.24 */
    public void testKeyUsage_InvalidRFC822nameConstraintsTest24() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidRFC822nameConstraintsTest24EE.crt",
                "nameConstraintsRFC822CA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA2CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.25 */
    public void testKeyUsage_ValidRFC822nameConstraintsTest25() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidRFC822nameConstraintsTest25EE.crt",
                "nameConstraintsRFC822CA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA3CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.26 */
    public void testKeyUsage_InvalidRFC822nameConstraintsTest26() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidRFC822nameConstraintsTest26EE.crt",
                "nameConstraintsRFC822CA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsRFC822CA3CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.27 */
    public void testKeyUsage_ValidDNandRFC822nameConstraintsTest27() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNandRFC822nameConstraintsTest27EE.crt",
                "nameConstraintsDN1subCA3Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA3CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.28 */
    public void testKeyUsage_InvalidDNandRFC822nameConstraintsTest28() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNandRFC822nameConstraintsTest28EE.crt",
                "nameConstraintsDN1subCA3Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA3CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.29 */
    public void testKeyUsage_InvalidDNandRFC822nameConstraintsTest29() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNandRFC822nameConstraintsTest29EE.crt",
                "nameConstraintsDN1subCA3Cert.crt",
                "nameConstraintsDN1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDN1CACRL.crl",
                "nameConstraintsDN1subCA3CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.30 */
    public void testKeyUsage_ValidDNSnameConstraintsTest30() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNSnameConstraintsTest30EE.crt",
                "nameConstraintsDNS1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDNS1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.31 */
    public void testKeyUsage_InvalidDNSnameConstraintsTest31() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNSnameConstraintsTest31EE.crt",
                "nameConstraintsDNS1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDNS1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.32 */
    public void testKeyUsage_ValidDNSnameConstraintsTest32() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidDNSnameConstraintsTest32EE.crt",
                "nameConstraintsDNS2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDNS2CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.33 */
    public void testKeyUsage_InvalidDNSnameConstraintsTest33() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNSnameConstraintsTest33EE.crt",
                "nameConstraintsDNS2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDNS2CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.34 */
    public void testKeyUsage_ValidURInameConstraintsTest34() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidURInameConstraintsTest34EE.crt",
                "nameConstraintsURI1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsURI1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.35 */
    public void testKeyUsage_InvalidURInameConstraintsTest35() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidURInameConstraintsTest35EE.crt",
                "nameConstraintsURI1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsURI1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.36 */
    public void testKeyUsage_ValidURInameConstraintsTest36() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidURInameConstraintsTest36EE.crt",
                "nameConstraintsURI2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsURI2CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.37 */
    public void testKeyUsage_InvalidURInameConstraintsTest37() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidURInameConstraintsTest37EE.crt",
                "nameConstraintsURI2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsURI2CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.13.38 */
    public void testKeyUsage_InvalidDNSnameConstraintsTest38() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidDNSnameConstraintsTest38EE.crt",
                "nameConstraintsDNS1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "nameConstraintsDNS1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.1 */
    public void testDistributionPoints_ValiddistributionPointTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddistributionPointTest1EE.crt",
                "distributionPoint1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.2 */
    public void testDistributionPoints_InvaliddistributionPointTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddistributionPointTest2EE.crt",
                "distributionPoint1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.3 */
    public void testDistributionPoints_InvaliddistributionPointTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddistributionPointTest3EE.crt",
                "distributionPoint1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint1CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.4 */
    public void testDistributionPoints_ValiddistributionPointTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddistributionPointTest4EE.crt",
                "distributionPoint1CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint1CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.5 */
    public void testDistributionPoints_ValiddistributionPointTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddistributionPointTest5EE.crt",
                "distributionPoint2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint2CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.6 */
    public void testDistributionPoints_InvaliddistributionPointTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddistributionPointTest6EE.crt",
                "distributionPoint2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint2CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.7 */
    public void testDistributionPoints_ValiddistributionPointTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddistributionPointTest7EE.crt",
                "distributionPoint2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint2CACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.8 */
    public void testDistributionPoints_InvaliddistributionPointTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddistributionPointTest8EE.crt",
                "distributionPoint2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint2CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.9 */
    public void testDistributionPoints_InvaliddistributionPointTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddistributionPointTest9EE.crt",
                "distributionPoint2CACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "distributionPoint2CACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.10 */
    public void testDistributionPoints_ValidNoissuingDistributionPointTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidNoissuingDistributionPointTest10EE.crt",
                "NoissuingDistributionPointCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "NoissuingDistributionPointCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.11 */
    public void testDistributionPoints_InvalidonlyContainsUserCertsCRLTest11() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlyContainsUserCertsTest11EE.crt",
                "onlyContainsUserCertsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlyContainsUserCertsCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.12 */
    public void testDistributionPoints_InvalidonlyContainsCACertsCRLTest12() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlyContainsCACertsTest12EE.crt",
                "onlyContainsCACertsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlyContainsCACertsCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.13 */
    public void testDistributionPoints_ValidonlyContainsCACertsCRLTest13() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidonlyContainsCACertsTest13EE.crt",
                "onlyContainsCACertsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlyContainsCACertsCACRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.14 */
    public void testDistributionPoints_InvalidonlyContainsAttributeCertsTest14() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlyContainsAttributeCertsTest14EE.crt",
                "onlyContainsAttributeCertsCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlyContainsAttributeCertsCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.15 */
    public void testDistributionPoints_InvalidonlySomeReasonsTest15() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlySomeReasonsTest15EE.crt",
                "onlySomeReasonsCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA1compromiseCRL.crl",
                "onlySomeReasonsCA1otherreasonsCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.16 */
    public void testDistributionPoints_InvalidonlySomeReasonsTest16() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlySomeReasonsTest16EE.crt",
                "onlySomeReasonsCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA1compromiseCRL.crl",
                "onlySomeReasonsCA1otherreasonsCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.17 */
    public void testDistributionPoints_InvalidonlySomeReasonsTest17() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlySomeReasonsTest17EE.crt",
                "onlySomeReasonsCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA2CRL1.crl",
                "onlySomeReasonsCA2CRL2.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.18 */
    public void testDistributionPoints_ValidonlySomeReasonsTest18() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidonlySomeReasonsTest18EE.crt",
                "onlySomeReasonsCA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA3compromiseCRL.crl",
                "onlySomeReasonsCA3otherreasonsCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.19 */
    public void testDistributionPoints_ValidonlySomeReasonsTest19() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidonlySomeReasonsTest19EE.crt",
                "onlySomeReasonsCA4Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA4compromiseCRL.crl",
                "onlySomeReasonsCA4otherreasonsCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.20 */
    public void testDistributionPoints_InvalidonlySomeReasonsTest20() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlySomeReasonsTest20EE.crt",
                "onlySomeReasonsCA4Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA4compromiseCRL.crl",
                "onlySomeReasonsCA4otherreasonsCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.21 */
    public void testDistributionPoints_InvalidonlySomeReasonsTest21() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidonlySomeReasonsTest21EE.crt",
                "onlySomeReasonsCA4Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "onlySomeReasonsCA4compromiseCRL.crl",
                "onlySomeReasonsCA4otherreasonsCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.22 */
    public void testDistributionPoints_ValidIDPwithindirectCRLTest22() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidIDPwithindirectCRLTest22EE.crt",
                "indirectCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA1CRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.23 */
    public void testDistributionPoints_InvalidIDPwithindirectCRLTest23() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidIDPwithindirectCRLTest23EE.crt",
                "indirectCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.24 */
    public void testDistributionPoints_ValidIDPwithindirectCRLTest24() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidIDPwithindirectCRLTest24EE.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] certs = {
                "ValidIDPwithindirectCRLTest24EE.crt",
                "indirectCRLCA1Cert.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA1CRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.25 */
    public void testDistributionPoints_ValidIDPwithindirectCRLTest25() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidIDPwithindirectCRLTest25EE.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] certs = {
                "ValidIDPwithindirectCRLTest25EE.crt",
                "indirectCRLCA1Cert.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA1CRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.26 */
    public void testDistributionPoints_InvalidIDPwithindirectCRLTest26() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidIDPwithindirectCRLTest26EE.crt",
                "indirectCRLCA1Cert.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA1CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.27 */
    public void testDistributionPoints_InvalidcRLIssuerTest27() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcRLIssuerTest27EE.crt",
                "GoodCACert.crt",
                "indirectCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "GoodCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.28 */
    public void testDistributionPoints_ValidcRLIssuerTest28() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidcRLIssuerTest28EE.crt",
                "indirectCRLCA3Cert.crt",
        };

        String[] certs = {
                "ValidcRLIssuerTest28EE.crt",
                "indirectCRLCA3cRLIssuerCert.crt",
                "indirectCRLCA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA3CRL.crl",
                "indirectCRLCA3cRLIssuerCRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.29 */
    public void testDistributionPoints_ValidcRLIssuerTest29() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidcRLIssuerTest29EE.crt",
                "indirectCRLCA3Cert.crt",
        };

        String[] certs = {
                "ValidcRLIssuerTest29EE.crt",
                "indirectCRLCA3cRLIssuerCert.crt",
                "indirectCRLCA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA3CRL.crl",
                "indirectCRLCA3cRLIssuerCRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.30 */
    public void testDistributionPoints_ValidcRLIssuerTest30() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidcRLIssuerTest30EE.crt",
                "indirectCRLCA4Cert.crt",
        };

        String[] certs = {
                "ValidcRLIssuerTest30EE.crt",
                "indirectCRLCA4cRLIssuerCert.crt",
                "indirectCRLCA4Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA4cRLIssuerCRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.31 */
    public void testDistributionPoints_InvalidcRLIssuerTest31() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcRLIssuerTest31EE.crt",
                "indirectCRLCA6Cert.crt",
                "indirectCRLCA5Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA5CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.32 */
    public void testDistributionPoints_InvalidcRLIssuerTest32() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcRLIssuerTest32EE.crt",
                "indirectCRLCA6Cert.crt",
                "indirectCRLCA5Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA5CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.33 */
    public void testDistributionPoints_ValidcRLIssuerTest33() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] path = {
                "ValidcRLIssuerTest33EE.crt",
                "indirectCRLCA6Cert.crt",
        };

        String[] certs = {
                "ValidcRLIssuerTest33EE.crt",
                "indirectCRLCA6Cert.crt",
                "indirectCRLCA5Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA5CRL.crl",
        };

        assertValidPath(trustAnchor, path, certs, crls);
    }

    /** NIST PKITS test 4.14.34 */
    public void testDistributionPoints_InvalidcRLIssuerTest34() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcRLIssuerTest34EE.crt",
                "indirectCRLCA5Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA5CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.14.35 */
    public void testDistributionPoints_InvalidcRLIssuerTest35() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvalidcRLIssuerTest35EE.crt",
                "indirectCRLCA5Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "indirectCRLCA5CRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.1 */
    public void testDeltaCRLs_InvaliddeltaCRLIndicatorNoBaseTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLIndicatorNoBaseTest1EE.crt",
                "deltaCRLIndicatorNoBaseCACert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLIndicatorNoBaseCACRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.2 */
    public void testDeltaCRLs_ValiddeltaCRLTest2() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddeltaCRLTest2EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.3 */
    public void testDeltaCRLs_InvaliddeltaCRLTest3() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLTest3EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.4 */
    public void testDeltaCRLs_InvaliddeltaCRLTest4() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLTest4EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.5 */
    public void testDeltaCRLs_ValiddeltaCRLTest5() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddeltaCRLTest5EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.6 */
    public void testDeltaCRLs_InvaliddeltaCRLTest6() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLTest6EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.7 */
    public void testDeltaCRLs_ValiddeltaCRLTest7() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddeltaCRLTest7EE.crt",
                "deltaCRLCA1Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA1CRL.crl",
                "deltaCRLCA1deltaCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.8 */
    public void testDeltaCRLs_ValiddeltaCRLTest8() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValiddeltaCRLTest8EE.crt",
                "deltaCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA2CRL.crl",
                "deltaCRLCA2deltaCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.9 */
    public void testDeltaCRLs_InvaliddeltaCRLTest9() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLTest9EE.crt",
                "deltaCRLCA2Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA2CRL.crl",
                "deltaCRLCA2deltaCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.15.10 */
    public void testDeltaCRLs_InvaliddeltaCRLTest10() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "InvaliddeltaCRLTest10EE.crt",
                "deltaCRLCA3Cert.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
                "deltaCRLCA3CRL.crl",
                "deltaCRLCA3deltaCRL.crl",
        };

        assertInvalidPath(trustAnchor, certs, crls);
    }

    /** NIST PKITS test 4.16.1 */
    public void testPrivateCertificateExtensions_ValidUnknownNotCriticalCertificateExtensionTest1() throws Exception {
        String trustAnchor = "TrustAnchorRootCertificate.crt";

        String[] certs = {
                "ValidUnknownNotCriticalCertificateExtensionTest1EE.crt",
        };

        String[] crls = {
                "TrustAnchorRootCRL.crl",
        };

        assertValidPath(trustAnchor, certs, crls);
    }

    /* DO NOT MANUALLY EDIT -- END AUTOMATICALLY GENERATED TESTS */
}