<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello, since 18th / 19th November we notice an error in the jtreg test
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">(on all platforms, for example linux x86_64 ).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Has anyone else seen the issue, or is it just us ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks, Matthias<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Error (stderr) output is :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">:stdErr:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Mon Nov 19 10:39:26 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PKIXCertPathValidator.engineValidate()...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 36122296c5e338a520a1d25f4cd70954<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 3c9131cb1ff6d01b0e9ab8d044bf12be<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 570a119742c4e3cc<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match returning: true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: YES - try this trustedCert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: anchor.getTrustedCert().getSubjectX500Principal() = CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: MD2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: MD5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: SHA1 jdkCA & usage TLSServer<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to jdkCA.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints usage length is 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: RSA keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: DSA keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: EC keySize < 224<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 224<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: --------------------------------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Executing PKIX certification path validation algorithm.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking cert1 - Subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Set of critical extensions: {2.5.29.15, 2.5.29.19}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker1 ... [sun.security.provider.certpath.UntrustedChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker1 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker2 ... [sun.security.provider.certpath.AlgorithmChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker2 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker3 ... [sun.security.provider.certpath.KeyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() ---checking CA key usage...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() CA key usage verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker3 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker4 ... [sun.security.provider.certpath.ConstraintsChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking basic constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: i = 1, maxPathLength = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: after processing, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: basic constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking name constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: prevNC = null, newNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: mergedNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: name constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker4 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker5 ... [sun.security.provider.certpath.PolicyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() ---checking certificate policies...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certIndex = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: explicitPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyMapping = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: inhibitAnyPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() policiesCritical = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() rejectPolicyQualifiers = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 2.5.29.32.0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certificate policies verified<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker5 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker6 ... [sun.security.provider.certpath.BasicChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking validity:Mon Nov 19 10:39:24 CET 2018...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: validity verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking subject/issuer name chaining...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: subject/issuer name chaining verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking signature...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: signature verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: BasicChecker.updateState issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT; subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano,
ST=Milano, C=IT; serial#: 3663163709977533131<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker6 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker7 ... [sun.security.provider.certpath.RevocationChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.check: checking cert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> SN: 32d62bfc 67501acb<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: connecting to OCSP service at: http://ocsp05.actalis.it/VA/AUTH-ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response status: SUCCESSFUL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response type: basic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder ID: byName: CN=Actalis Authentication Root CA - OCSP Responder, O=Actalis S.p.A./03358520967, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response produced at: Mon Nov 19 10:39:24 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP number of SingleResponses: 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: thisUpdate: Fri Oct 19 14:29:36 CEST 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: nextUpdate: Thu Jan 17 13:29:36 CET 2019<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response cert #1: CN=Actalis Authentication Root CA - OCSP Responder, O=Actalis S.p.A./03358520967, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Status of certificate (with serial number 3663163709977533131) is: GOOD<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder's certificate includes the extension id-pkix-ocsp-nocheck.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response is signed by an Authorized Responder<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA1withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: jdkCAConstraints.permits(): SHA1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Verified signature of OCSP Response<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response validity interval is from Fri Oct 19 14:29:36 CEST 2018 until Thu Jan 17 13:29:36 CET 2019<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking validity of OCSP response on: Mon Nov 19 10:39:24 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker7 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">cert1 validation succeeded.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking cert2 - Subject: OID.1.3.6.1.4.1.311.60.2.1.3=IT, STREET=Via S. Clemente 53, OID.2.5.4.15=Private Organization, CN=www.actalis.it, SERIALNUMBER=03358520967, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo,
C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Set of critical extensions: {2.5.29.15, 2.5.29.19}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker1 ... [sun.security.provider.certpath.UntrustedChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker1 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker2 ... [sun.security.provider.certpath.AlgorithmChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker2 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker3 ... [sun.security.provider.certpath.KeyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker3 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker4 ... [sun.security.provider.certpath.ConstraintsChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking basic constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: i = 2, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: after processing, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: basic constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking name constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: prevNC = null, newNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: mergedNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: name constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker4 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker5 ... [sun.security.provider.certpath.PolicyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() ---checking certificate policies...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certIndex = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() policiesCritical = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() rejectPolicyQualifiers = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 1.3.159.1.17.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 2.23.140.1.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 1.3.159.1.17.1 CRIT: false EP: 1.3.159.1.17.1 (2)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 2.23.140.1.1 CRIT: false EP: 2.23.140.1.1 (2)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certificate policies verified<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker5 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker6 ... [sun.security.provider.certpath.BasicChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking validity:Mon Nov 19 10:39:24 CET 2018...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: validity verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking subject/issuer name chaining...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: subject/issuer name chaining verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking signature...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: signature verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: BasicChecker.updateState issuer: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT; subject: OID.1.3.6.1.4.1.311.60.2.1.3=IT, STREET=Via S. Clemente 53, OID.2.5.4.15=Private
Organization, CN=www.actalis.it, SERIALNUMBER=03358520967, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo, C=IT; serial#: 1076059514591231458<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker6 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker7 ... [sun.security.provider.certpath.RevocationChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.check: checking cert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> SN: 0eeeee6d 6463bde2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OID.1.3.6.1.4.1.311.60.2.1.3=IT, STREET=Via S. Clemente 53, OID.2.5.4.15=Private Organization, CN=www.actalis.it, SERIALNUMBER=03358520967, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: connecting to OCSP service at: http://ocsp05.actalis.it/VA/AUTHEV-G1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response status: SUCCESSFUL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response type: basic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder ID: byName: CN=Actalis Extended Validation Server CA G1 - OCSP Responder, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response produced at: Mon Nov 19 10:39:24 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP number of SingleResponses: 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: thisUpdate: Mon Nov 19 07:19:26 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: nextUpdate: Tue Nov 20 07:19:26 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response cert #1: CN=Actalis Extended Validation Server CA G1 - OCSP Responder, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Status of certificate (with serial number 1076059514591231458) is: GOOD<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder's certificate includes the extension id-pkix-ocsp-nocheck.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response is signed by an Authorized Responder<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA1withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: jdkCAConstraints.permits(): SHA1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Verified signature of OCSP Response<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response validity interval is from Mon Nov 19 07:19:26 CET 2018 until Tue Nov 20 07:19:26 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking validity of OCSP response on: Mon Nov 19 10:39:25 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker7 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">cert2 validation succeeded.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Cert path validation succeeded. (PKIX validation algorithm)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: --------------------------------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PKIXCertPathValidator.engineValidate()...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 3c9131cb1ff6d01b0e9ab8d044bf12be<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 7dd9fe07cfa81eb7107967fba78934c6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 570a119742c4e3cc<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match returning: true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: YES - try this trustedCert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: anchor.getTrustedCert().getSubjectX500Principal() = CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: --------------------------------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Executing PKIX certification path validation algorithm.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking cert1 - Subject: CN=Actalis Authentication CA G3, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Set of critical extensions: {2.5.29.15, 2.5.29.19}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker1 ... [sun.security.provider.certpath.UntrustedChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker1 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker2 ... [sun.security.provider.certpath.AlgorithmChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker2 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker3 ... [sun.security.provider.certpath.KeyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() ---checking CA key usage...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() CA key usage verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker3 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker4 ... [sun.security.provider.certpath.ConstraintsChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking basic constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: i = 1, maxPathLength = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: after processing, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: basic constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking name constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: prevNC = null, newNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: mergedNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: name constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker4 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker5 ... [sun.security.provider.certpath.PolicyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() ---checking certificate policies...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certIndex = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: explicitPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyMapping = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: inhibitAnyPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() policiesCritical = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() rejectPolicyQualifiers = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 2.5.29.32.0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certificate policies verified<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker5 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker6 ... [sun.security.provider.certpath.BasicChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking validity:Fri Jul 01 00:00:00 CEST 2016...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: validity verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking subject/issuer name chaining...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: subject/issuer name chaining verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking signature...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: signature verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: BasicChecker.updateState issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT; subject: CN=Actalis Authentication CA G3, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT;
serial#: 8366940759504193212<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker6 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker7 ... [sun.security.provider.certpath.RevocationChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.check: checking cert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> SN: 741d584a 72fc06bc<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Authentication CA G3, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: connecting to OCSP service at: http://portal.actalis.it/VA/AUTH-ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response status: SUCCESSFUL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response type: basic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder ID: byName: CN=Actalis Authentication Root CA - OCSP Responder, O=Actalis S.p.A./03358520967, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response produced at: Mon Nov 19 10:39:25 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP number of SingleResponses: 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: thisUpdate: Fri Oct 19 14:29:36 CEST 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: nextUpdate: Thu Jan 17 13:29:36 CET 2019<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response cert #1: CN=Actalis Authentication Root CA - OCSP Responder, O=Actalis S.p.A./03358520967, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Status of certificate (with serial number 8366940759504193212) is: GOOD<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder's certificate includes the extension id-pkix-ocsp-nocheck.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response is signed by an Authorized Responder<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA1withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: jdkCAConstraints.permits(): SHA1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Verified signature of OCSP Response<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response validity interval is from Fri Oct 19 14:29:36 CEST 2018 until Thu Jan 17 13:29:36 CET 2019<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking validity of OCSP response on: Mon Nov 19 10:39:25 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker7 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">cert1 validation succeeded.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking cert2 - Subject: CN=ssltest-r.actalis.it, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Set of critical extensions: {2.5.29.15, 2.5.29.19}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker1 ... [sun.security.provider.certpath.UntrustedChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker1 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker2 ... [sun.security.provider.certpath.AlgorithmChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker2 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker3 ... [sun.security.provider.certpath.KeyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker3 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker4 ... [sun.security.provider.certpath.ConstraintsChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking basic constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: i = 2, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: after processing, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: basic constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking name constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: prevNC = null, newNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: mergedNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: name constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker4 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker5 ... [sun.security.provider.certpath.PolicyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() ---checking certificate policies...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certIndex = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() policiesCritical = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() rejectPolicyQualifiers = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 1.3.159.1.20.1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 2.23.140.1.2.2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 2.23.140.1.2.2 CRIT: false EP: 2.23.140.1.2.2 (2)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 1.3.159.1.20.1 CRIT: false EP: 1.3.159.1.20.1 (2)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certificate policies verified<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker5 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker6 ... [sun.security.provider.certpath.BasicChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking validity:Fri Jul 01 00:00:00 CEST 2016...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: validity verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking subject/issuer name chaining...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: subject/issuer name chaining verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking signature...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: signature verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: BasicChecker.updateState issuer: CN=Actalis Authentication CA G3, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT; subject: CN=ssltest-r.actalis.it, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo,
C=IT; serial#: 312400490844506479<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker6 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker7 ... [sun.security.provider.certpath.RevocationChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.check: checking cert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> SN: 0455de97 5c71c96f<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=ssltest-r.actalis.it, O=Actalis S.p.A., L=Ponte San Pietro, ST=Bergamo, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication CA G3, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: connecting to OCSP service at: http://ocsp03.actalis.it/VA/AUTH-G3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response status: SUCCESSFUL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response type: basic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder ID: byName: CN=Actalis Authentication CA G3 - OCSP Responder, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response produced at: Mon Nov 19 10:39:25 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP number of SingleResponses: 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Revocation time: Fri Jan 29 10:06:42 CET 2016<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Revocation reason: CESSATION_OF_OPERATION<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: thisUpdate: Mon Nov 19 06:46:50 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: nextUpdate: Tue Nov 20 06:46:50 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response cert #1: CN=Actalis Authentication CA G3 - OCSP Responder, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Status of certificate (with serial number 312400490844506479) is: REVOKED<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Responder's certificate includes the extension id-pkix-ocsp-nocheck.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response is signed by an Authorized Responder<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA1withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: jdkCAConstraints.permits(): SHA1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Verified signature of OCSP Response<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: OCSP response validity interval is from Mon Nov 19 06:46:50 CET 2018 until Tue Nov 20 06:46:50 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking validity of OCSP response on: Mon Nov 19 10:39:25 CET 2018<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 1a5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 9b7e0649a33e62b9d5ee90487129ef57<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: b92f60cc889fa17a4609b85b706c8aaf<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 67c8e1e8e3be1cbdfc913b8ea6238749<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 10020<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 36122296c5e338a520a1d25f4cd70954<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">STATUS:Passed.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">--------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PKIXCertPathValidator.engineValidate()...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 9b7e0649a33e62b9d5ee90487129ef57<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 1a5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=GTE CyberTrust Global Root, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 10020<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 7dd9fe07cfa81eb7107967fba78934c6<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 36122296c5e338a520a1d25f4cd70954<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: b92f60cc889fa17a4609b85b706c8aaf<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 570a119742c4e3cc<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match returning: true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: YES - try this trustedCert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: anchor.getTrustedCert().getSubjectX500Principal() = CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: MD2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: MD5<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: SHA1 jdkCA & usage TLSServer<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to jdkCA.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints usage length is 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: RSA keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: DSA keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 1024<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints: EC keySize < 224<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints set to keySize: keySize < 224<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AlgorithmChecker.contains: SHA256withRSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: AnchorCertificate.contains: matched CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: trustedMatch = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: --------------------------------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Executing PKIX certification path validation algorithm.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Checking cert1 - Subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Set of critical extensions: {2.5.29.15, 2.5.29.19}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker1 ... [sun.security.provider.certpath.UntrustedChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker1 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker2 ... [sun.security.provider.certpath.AlgorithmChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Constraints.permits(): SHA256withRSA Variant: generic<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeySizeConstraints.permits(): RSA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker2 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker3 ... [sun.security.provider.certpath.KeyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() ---checking CA key usage...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: KeyChecker.verifyCAKeyUsage() CA key usage verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker3 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker4 ... [sun.security.provider.certpath.ConstraintsChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking basic constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: i = 1, maxPathLength = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: after processing, maxPathLength = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: basic constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking name constraints...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: prevNC = null, newNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: mergedNC = null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: name constraints verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker4 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker5 ... [sun.security.provider.certpath.PolicyChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() ---checking certificate policies...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certIndex = 1<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: explicitPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyMapping = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: inhibitAnyPolicy = 3<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() BEFORE PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() policiesCritical = false<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() rejectPolicyQualifiers = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processPolicies() processing policy: 2.5.29.32.0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents(): matchAny = true<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.processParents() found parent:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: explicitPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyMapping = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: inhibitAnyPolicy = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() AFTER PROCESSING: policyTree = anyPolicy ROOT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> anyPolicy CRIT: false EP: anyPolicy (1)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: PolicyChecker.checkPolicy() certificate policies verified<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker5 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker6 ... [sun.security.provider.certpath.BasicChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking validity:Mon Nov 19 10:39:25 CET 2018...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: validity verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking subject/issuer name chaining...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: subject/issuer name chaining verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: ---checking signature...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: signature verified.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: BasicChecker.updateState issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT; subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano,
ST=Milano, C=IT; serial#: 3663163709977533131<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -checker6 validation succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: -Using checker7 ... [sun.security.provider.certpath.RevocationChecker]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.check: checking cert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> SN: 32d62bfc 67501acb<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.checkCRLs() ---checking revocation status ...<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.checkCRLs() possible crls.size() = 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: RevocationChecker.checkCRLs() approved crls.size() = 0<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: DistributionPointFetcher.getCRLs: Checking CRLDPs for CN=Actalis Extended Validation Server CA G1, O=Actalis S.p.A./03358520967, L=Milano, ST=Milano, C=IT<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: Trying to fetch CRL from DP ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: CertStore URI:ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: LDAPCertStore.engineGetCRLs() selector: null<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 3c9131cb1ff6d01b0e9ab8d044bf12be<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match(SN: 67c8e1e8e3be1cbdfc913b8ea6238749<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Issuer: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Subject: CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">certpath: X509CertSelector.match: subject DNs don't match<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at ValidatePathWithParams.validate(ValidatePathWithParams.java:177)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at ActalisCA.main(ActalisCA.java:235)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/java.lang.reflect.Method.invoke(Method.java:566)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:115)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> at java.base/java.lang.Thread.run(Thread.java:834)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">JavaTest Message: Test threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">JavaTest Message: shutting down test<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">STATUS:Failed.`main' threw exception: java.lang.RuntimeException: TEST FAILED: couldn't determine EE certificate status<o:p></o:p></span></p>
</div>
</body>
</html>