Please review the fix at http://cr.openjdk.java.net/~weijun/8073182/webrev.00/ This fix stores extensions inside CertificateExtensions using OID as key so there will never be a type duplicate. Existing test updated. Thanks Max