code: public static Certificate
  parseRecord(CERTRecord r) {
  	int type = r.getCertType();
  	byte [] data = r.getCert();
  	Certificate cert;
  	try {
  		switch (type) {
  			case CERTRecord.PKIX: {
  				CertificateFactory cf;
  				ByteArrayInputStream bs;
  
  				cf = CertificateFactory.getInstance("X.509");
  				bs = new ByteArrayInputStream(data);
  				cert = cf.generateCertificate(bs);
  				break;
  			}
  			default:
  				return null;
  		}
  		return cert;
  	}
  	catch (CertificateException e) {
  		if (Options.check("verboseexceptions"))
  			System.err.println("Cert parse exception:" + e);
  		return null;
  	}
  }
docs: Converts a CERT record into a Certificate