The code appears to reject this CRL, though, admittedly it appears to be singed with the associated CA key.
Content-Type = application/pkix-crl
Content-Length = 1074
File downloaded
Rejecting CRL URL due to no KeyIdentifier: http://pki.strac.org/bridge/crl/STRACBridgeRootCA.crl
No CRL for the CA with an SKI value of: D238DDB5EF4B5957367FBFBF9CA67D0C193105AD
Searching for SKI Value: 0414D238DDB5EF4B5957367FBFBF9CA67D0C193105AD
[
[
Version: V3
Subject: CN=FTI Certification Authority, OU=FTI PKI Trust Infrastructure, O=Foundation for Trusted Identity, C=US
Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11
Key: Sun RSA public key, 4096 bits
params: null
modulus: 861234339950231203917396431587390563821444426959227754894267886381163505488888683455082520359504145125561186448834010102235984496938400294017742598220673160121846447816301416311710196192091489488723025996059625219929257564450118688377987957115496143819108533574690809000959899013861311145511486742531730231692143632719061811723405563984645086539629245444812982656646749211843389165113675864171152307023679279869602600908852719369285329802221705378130263710830523655120919463095473271973740160136237520402657669107542535616494242553529931849999363068648141488690273558315066278090600694012077859969077783025900678899195906699523188998394636816491261757854778918230538445630005514088248643004000804917142303182000378595361259253389602463411112220158351554224702519459718266047316566192647390827694228529427274296029526449717608313015035320535032005535604117123301025686108873954875766525236432922137482645775314326022439400161485876341590760219259960968550538475406591104394439690790158141243056706070823557823666999514425241305885549645119939739880076732144013604183503980809069441228569110100059794796017347732290063632541202694626597706107037640106330218710016571926697061679874761774071992446044013562448251384069486918067501429477
public exponent: 65537
Validity: [From: Wed Jan 08 20:31:47 EST 2020,
To: Sat Jan 07 20:31:47 EST 2023]
Issuer: CN=STRAC Bridge Root Certification Authority, OU=STRAC PKI Trust Infrastructure, O=STRAC, C=US
SerialNumber: [ c1]
Certificate Extensions: 10
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
[
accessMethod: caIssuers
accessLocation: URIName: http://pki.strac.org/bridge/certificates/STRACBridgeRootCA.p7c
,
accessMethod: ocsp
accessLocation: URIName: http://certstatus.strac.org
]
]
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: A8 21 50 67 40 0A 3A B4 B7 67 D7 96 AA 33 9F 55 .!Pg@.:..g...3.U
0010: 47 AF 5D 3D G.]=
]
]
[3]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:2147483647
]
[4]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: http://pki.strac.org/bridge/crl/STRACBridgeRootCA.crl]
]]
[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.1]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.2]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.3]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.4]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.5]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.6]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.7]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.8]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.9]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.10]
[] ]
[CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.11]
[] ]
]
[6]: ObjectId: 2.5.29.18 Criticality=false
IssuerAlternativeName [
RFC822Name: [email protected]
]
[7]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Crl_Sign
]
[8]: ObjectId: 2.5.29.33 Criticality=false
PolicyMappings [
[CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.1]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.1]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.2]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.2]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.3]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.3]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.4]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.4]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.5]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.5]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.6]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.6]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.7]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.7]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.8]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.8]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.9]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.9]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.10]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.10]
]
, CertificatePolicyMap: [
IssuerDomain:CertificatePolicyId: [1.3.6.1.4.1.39789.2.1.5.11]
SubjectDomain:CertificatePolicyId: [1.3.6.1.4.1.47951.2.2.5.11]
]
]]
[9]: ObjectId: 1.3.6.1.5.5.7.1.11 Criticality=false
SubjectInfoAccess [
[
accessMethod: caRepository
accessLocation: URIName: http://pki.fti.org/fti_ca/certificates/FTICA.p7c
]
]
[10]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: D2 38 DD B5 EF 4B 59 57 36 7F BF BF 9C A6 7D 0C .8...KYW6.......
0010: 19 31 05 AD .1..
]
]
Unparseable certificate extensions: 1
[1]: ObjectId: 2.5.29.54 Criticality=false
Unparseable InhibitAnyPolicy extension due to
java.io.IOException: Criticality cannot be false for InhibitAnyPolicy
0000: 02 01 00 ...
]
Algorithm: [SHA256withRSA]
Signature:
0000: 32 DA BD F8 E2 BC 00 F2 C8 1C 43 E2 33 77 F5 66 2.........C.3w.f
0010: 38 D7 F5 E7 AC 8F 26 BC 47 9E 55 EE 0A 00 C0 72 8.....&.G.U....r
0020: 85 C7 79 81 61 1A 07 49 EF 9A 9A F1 C0 02 E8 F9 ..y.a..I........
0030: 49 59 E6 9D E7 9A 8C 29 E2 75 DA CF A4 E8 AF 6D IY.....).u.....m
0040: 4A 39 31 04 9F 4E 57 ED 77 B7 06 3A C4 57 C6 3C J91..NW.w..:.W.<
0050: 9B D0 C4 B0 92 0E A8 B1 BD C8 9B 0B 95 0C A9 A0 ................
0060: 5F B0 4F 9F E9 15 AB E6 10 E7 2A CD 41 A1 CD AE _.O.......*.A...
0070: 46 24 AE 02 10 EB 0D BC 51 CA 32 34 64 BF 39 0E F$......Q.24d.9.
0080: 26 F7 EA 1C 60 47 7D 3E 89 00 01 48 72 52 FB E2 &...`G.>...HrR..
0090: 46 F8 52 9B 11 07 94 9A B7 AC 1C 4A 46 69 CB 53 F.R........JFi.S
00A0: 18 B6 EE DA 23 D0 B2 C9 FB 70 AF FA E3 78 23 48 ....#....p...x#H
00B0: BB B0 06 18 BE 1D B1 F6 D5 2C 83 12 13 7E DF 78 .........,.....x
00C0: A7 EB 1F BE 77 A3 D4 C5 AF 1D ED 13 48 D3 A7 A7 ....w.......H...
00D0: 4D 94 D8 F1 A2 60 F3 E4 FD 14 1E 5C 55 72 4F 3E M....`.....\UrO>
00E0: F6 5D 70 54 01 0D 49 36 D9 A0 FF AE C8 65 00 95 .]pT..I6.....e..
00F0: 33 B9 D1 4B 82 28 A7 D2 05 B8 65 C3 28 1A 99 A2 3..K.(....e.(...
0100: 18 F9 F3 CF B1 98 57 4F B8 12 3F 08 AD 42 04 F7 ......WO..?..B..
0110: 8B 4A 18 5C 6C C8 68 A7 F2 39 2B 16 3D F5 EB 1C .J.\l.h..9+.=...
0120: F0 F8 94 81 F9 27 2A F6 19 E1 23 F3 18 D2 C7 90 .....'*...#.....
0130: 65 4C AB 71 3F F5 14 1E DF C3 F4 88 55 78 8F 6D eL.q?.......Ux.m
0140: 59 82 F6 F2 DF FE 23 04 EE AD F9 35 73 24 C1 80 Y.....#....5s$..
0150: 2E 81 27 8D 2E 7B 5E AA 17 88 1B A3 1F 30 1C 93 ..'...^......0..
0160: A7 FA 99 F1 AE 5C 47 99 7B 06 28 E7 48 61 A3 E3 .....\G...(.Ha..
0170: C1 EE DA 36 34 99 A6 7B 5E 8E C5 7D BE B5 EB A3 ...64...^.......
0180: 47 6B 90 90 F1 0F 5D 89 8C 16 E7 80 C8 4E 8B EC Gk....]......N..
0190: 94 F6 5F 38 01 55 A7 E9 75 05 41 C3 02 52 D5 70 .._8.U..u.A..R.p
01A0: FF D7 37 CF 04 90 F5 67 FE D3 A3 9C B4 AE AB 1E ..7....g........
01B0: 7C 56 80 34 54 8C 31 EC 66 FD 22 F3 D6 86 BA 10 .V.4T.1.f.".....
01C0: 2C 7F 9C FF 57 B2 58 8A BD 82 9A 69 9A DA E4 A0 ,...W.X....i....
01D0: E9 65 10 B9 C5 D1 1B A4 FC 6D A4 2C 1A EC D4 54 .e.......m.,...T
01E0: CD 43 03 FE C9 45 72 A4 6B 70 86 8D E6 8B 98 97 .C...Er.kp......
01F0: 76 CD 9D 24 72 1F 77 89 A0 AB 35 42 84 82 2F 02 v..$r.w...5B../.
]