@Test
  fun equalsFromCertificate() {
    val rootA =
      HeldCertificate
        .Builder()
        .serialNumber(1L)
        .build()
    val rootB =
      HeldCertificate
        .Builder()
        .serialNumber(2L)
        .build()
    assertThat(get(rootB.certificate, rootA.certificate))
      .isEqualTo(get(rootA.certificate, rootB.certificate))
  }

  @Test
  fun equalsFromTrustManager() {

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          check-latest: true
      - name: Start root lockdown tests
        run: |

if [ $? -ne 0 ]; then
	echo "listing failed, 'minioadmin' should be enabled"
	exit 1
fi

killall -9 minio

rm -rf /tmp/multisitea/
rm -rf /tmp/multisiteb/

echo "Setup site-replication and then disable root credentials"

minio server --address 127.0.0.1:9001 "http://127.0.0.1:9001/tmp/multisitea/data/disterasure/xl{1...4}" \
	"http://127.0.0.1:9002/tmp/multisitea/data/disterasure/xl{5...8}" >/tmp/sitea_1.log 2>&1 &

/**
 * MSRPC implementation for enumerating DFS roots.
 * This class provides functionality to enumerate Distributed File System (DFS)
 * roots on a server using the NetDFS RPC interface.
 */
public class MsrpcDfsRootEnum extends netdfs.NetrDfsEnumEx {

    /**
     * Creates a new DFS root enumeration request for the specified server.
     *
     * @param server the server name to enumerate DFS roots from
     */

/**
 * MSRPC implementation for enumerating DFS roots.
 * This class provides functionality to enumerate Distributed File System (DFS)
 * roots on a server using the NetDFS RPC interface.
 */
public class MsrpcDfsRootEnum extends netdfs.NetrDfsEnumEx {

    /**
     * Creates a new DFS root enumeration request for the specified server.
     *
     * @param server the server name to enumerate DFS roots from
     */

Harshavardhana <******@****.***> 1620513629 -0700

Harshavardhana <******@****.***> 1620513629 -0700

starting with its own and including everything up-to but not including the root. We don't need to
include root certificates because the client already has them.

```java
HandshakeCertificates serverHandshakeCertificates = new HandshakeCertificates.Builder()
    .heldCertificate(serverCertificate, intermediateCertificate.certificate())
    .build();
```

The client only needs to know the trusted root certificate. It checks the server's certificate by

 *    certificates to establish trust from a root certificate to the server's certificate. The root
 *    certificate is not included in this chain.
 *  * The client's handshake certificates must include a set of trusted root certificates. They will
 *    be used to authenticate the server's certificate chain. Typically this is a set of well-known
 *    root certificates that is distributed with the HTTP client or its platform. It may be

      .Builder()
      .addInterceptor(CompressionInterceptor(Zstd))
      .build()

  sendRequest("https://developers.facebook.com/docs/", client)
  sendRequest("https://www.facebook.com/robots.txt", client)
  sendRequest("https://www.instagram.com/robots.txt", client)
}

private fun sendRequest(
  url: String,
  client: OkHttpClient,
) {
  val req = Request.Builder().url(url).build()

  client.newCall(req).execute().use {