private static Set<Option> revocationOptions() {
        Set<Option> options = new HashSet<>();
        options.add(Option.ONLY_END_ENTITY); // Only check end entity
        options.add(Option.NO_FALLBACK);     // Don't fall back from OCSP to CRL download
        return Collections.unmodifiableSet(options);
    }
Comparator for sorting {@link TrustAnchor}s using a {@link CertificatePriorityComparator}.
common/src/main/java/org/conscrypt/TrustManagerImpl.java