Creating and using a PKIXCertPathChecker Object

The PKIXCertPathChecker class does not have a public constructor. This is intentional, because creating an instance of PKIXCertPathChecker is an implementation-specific issue. For example, the constructor for a PKIXCertPathChecker implementation that uses OCSP to check a certificate's revocation status may require the hostname and port of the OCSP server:

PKIXCertPathChecker checker = new OCSPChecker("ocsp.ibm.com", 1321);

After the checker has been instantiated, it can be added as a parameter using the addCertPathChecker method of the PKIXParameters class:

params.addCertPathChecker(checker);