iaik.x509.X509Certificate.StaticCacheSize

By default, the toolkit operations cache a maximum of 250 certificates. To change this value, set this property as follows.

In previous releases of the Toolkit, the Authority Key Identifier (AKI) and Subject Key Identifier (SKI) extensions were used to determine the issuer of a certificate. An AKI/SKI comparison was performed on a set of potential issuer certificates to determine which were not the issuer. If the SKI of a potential issuer certificate does not match the AKI of the certificate whose issuer is being searched for, the potential issuer certificate is rejected. However, rarely, the AKI and SKI did not match for an issuer certificate.