private void verifyExternalSCTs(List<SignedCertificateTimestamp> scts,
            OpenSSLX509Certificate leaf, VerificationResult result) {
        // Avoid creating the cert entry if we don't need it
        if (scts.isEmpty()) {
            return;
        }

        CertificateEntry x509Entry;
        try {
            x509Entry = CertificateEntry.createForX509Certificate(leaf);
        } catch (CertificateException e) {
            markSCTsAsInvalid(scts, result);
            return;
        }

        verifySCTs(scts, x509Entry, result);
    }
Verify a list of SCTs which were not embedded in an X509 certificate, that is received
through the TLS or OCSP extensions.
The result of the verification for each sct is added to {@code result}.
common/src/main/java/org/conscrypt/ct/Verifier.java