`DistributionPointName` in `IssuingDistributionPointExtension` is a CHOICE and should not be encoded as IMPLICIT.
Please note that the parsing side (at https://github.com/openjdk/jdk/blob/a9db70418f7bc6b2f95afdd36a36024f865c04bf/src/java.base/share/classes/sun/security/x509/IssuingDistributionPointExtension.java#L195) is aware of this and has not called `resetTag()`. ------------- Commit messages: - 8274330: Incorrect encoding of the DistributionPointName object in IssuingDistributionPointExtension Changes: https://git.openjdk.java.net/jdk/pull/5706/files Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=5706&range=00 Issue: https://bugs.openjdk.java.net/browse/JDK-8274330 Stats: 52 lines in 2 files changed: 50 ins; 0 del; 2 mod Patch: https://git.openjdk.java.net/jdk/pull/5706.diff Fetch: git fetch https://git.openjdk.java.net/jdk pull/5706/head:pull/5706 PR: https://git.openjdk.java.net/jdk/pull/5706