--- old/src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java 2016-10-12 10:43:53.719217799 -0700 +++ new/src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java 2016-10-12 10:43:53.579217804 -0700 @@ -437,7 +437,7 @@ private void updateState(X509Certificate cert) throws CertPathValidatorException { - issuerInfo = new OCSPResponse.IssuerInfo(cert); + issuerInfo.setIssuerCert(cert); // Make new public key if parameters are missing PublicKey pubKey = cert.getPublicKey(); @@ -741,7 +741,8 @@ response = OCSP.check(Collections.singletonList(certId), responderURI, issuerInfo, - responderCert, null, ocspExtensions); + responderCert, params.date(), + ocspExtensions); } } catch (IOException e) { throw new CertPathValidatorException(