java.security.cert.X509Certificate[] certChain = null;
try {
      if (token instanceof java.security.cert.X509Certificate[]) {
            certChain = (java.security.cert.X509Certificate[]) token;
            serialNumber = certChain[0].getSerialNumber();
      }
      else if (token instanceof sun.security.x509.X509CertImpl[]) {
            certChain = (sun.security.x509.X509CertImpl[]) token;
            serialNumber = certChain[0].getSerialNumber();
      } else {
      throw new IdentityAssertionException("无效的标记类型 "

+ formAuthUserID);
}
CertPath certPath;
java.security.cert.CertificateFactory cf1 = java.security.cert.CertificateFactory
.getInstance("X.509");
ArrayList certList = new ArrayList(certChain.length);
for (int i = 0; i < certChain.length; i++)
certList.add(certChain[i]);
try {
      certPath = cf1.generateCertPath(certList);
      System.out.println("生成Cerpath路径...");
} catch (CertificateException ex) {
      certPath = cf1.generateCertPath(certList);
}
CertPathValidator validator = CertPathValidator
.getInstance("WLSCertPathValidator");
X509Certificate x509TrustedCAs[] = null;
CertPathValidatorParameters params = new CertPathValidatorParameters(
WEBLOGIC_REALM, x509TrustedCAs, context);
CertPathValidatorResult certPathValidatorResult = validator
.validate(certPath, params);

HTTP-403