private static X509Certificate certificateFromPEM(Provider p, String pem)
            throws CertificateException {
        CertificateFactory cf = CertificateFactory.getInstance("X509", p);
        return (X509Certificate) cf.generateCertificate(
                new ByteArrayInputStream(pem.getBytes(StandardCharsets.US_ASCII)));
    }
This is a certificate whose keyUsage extension has more than nine bits. The getKeyUsage()
method internally rounds up to nine bits, so this tests what happens when it does not need to
round.
common/src/test/java/org/conscrypt/java/security/cert/X509CertificateTest.java