src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java

@@ -435,11 +435,11 @@
     }
 
     private void updateState(X509Certificate cert)
         throws CertPathValidatorException
     {
-        issuerInfo = new OCSPResponse.IssuerInfo(cert);
+        issuerInfo = new OCSPResponse.IssuerInfo(anchor, cert);
 
         // Make new public key if parameters are missing
         PublicKey pubKey = cert.getPublicKey();
         if (PKIX.isDSAPublicKeyWithoutParams(pubKey)) {
             // pubKey needs to inherit DSA parameters from prev key

@@ -738,12 +738,12 @@
                         "Certificate does not specify OCSP responder", null,
                         null, -1);
                 }
 
                 response = OCSP.check(Collections.singletonList(certId),
-                                      responderURI, issuerInfo,
-                                      responderCert, null, ocspExtensions);
+                        responderURI, issuerInfo, responderCert, params.date(),
+                        ocspExtensions);
             }
         } catch (IOException e) {
             throw new CertPathValidatorException(
                 "Unable to determine revocation status due to network error",
                 e, null, -1, BasicReason.UNDETERMINED_REVOCATION_STATUS);