Earlier this year, we dropped the requirement to deliver JSR 105 (XML
Digital Signature API) as a standalone JSR [1], which will make it
easier to add some long-standing enhancements to the API.
The first of those is to finally add support for generics to the API:
- all Collection and Iterator
Well, sorry, but this is not a bug so we should not fix it. The
certificate is not compliant with RFC 5280. See Section 4.2: "A
certificate MUST NOT include more than one instance of a particular
extension." The EKU extension is already designed to specify more than
one key purpose, so it doesn
