@Test
    public void testInvalidChainExpiredTrustAnchor() throws Exception
    {
        // Setup fixture.

        // Execute system under test.
        assertThrows(CertificateException.class, () -> systemUnderTest.checkClientTrusted( expiredRootChain, "RSA" ) );
    }
Verifies that a chain that has a root certificate (trust anchor) that is expired is rejected.
xmppserver/src/test/java/org/jivesoftware/openfire/keystore/OpenfireX509TrustManagerTest.java