code: protected List<CertificateChecker> getCertificateCheckers() {
          List<CertificateChecker> checkers = new ArrayList<CertificateChecker>();
          checkers.add(new DateValidityChecker());
          checkers.add(new UnsupportedCriticalExtensionChecker());
          checkers.add(new IdentityChecker(this));
          // NOTE: the (possible) refresh of the CRLs happens when we call getDefault.
          // Hence, we must recreate crlsList for each call to checkCertificate
          // Sadly, this also means that the amount of work necessary for checkCertificate
          // can be arbitrarily large (if the CRL is indeed refreshed).
          //
          // Note we DO NOT use this.certStore by default!  TODO: This differs from the unit test
          CertificateRevocationLists crlsList = CertificateRevocationLists.getDefaultCertificateRevocationLists();
          checkers.add(new CRLChecker(crlsList, this.keyStore, true));
          checkers.add(new SigningPolicyChecker(this.policyStore));
          return checkers;
      }
docs: COMMENT enable the checkers again when ProxyPathValidator starts working!