// but shows that APPLICATION tag is properly recognized
        DERSequence emptyBase = new DERSequence(new ASN1EncodableVector());
        DERTaggedObject appTag = new DERTaggedObject(false, BERTags.APPLICATION, 3, emptyBase);
        v.add(appTag);
        ASN1Sequence seq = new DERSequence(v);

        // Act + Assert

        principalVector.add(new DERTaggedObject(true, 1, new DERSequence(principalNameVector)));
        v.add(new DERTaggedObject(true, 3, new DERSequence(principalVector)));

        // Wrap in APPLICATION tag as expected by KerberosEncData
        DERSequence seq = new DERSequence(v);
        return new DERTaggedObject(false, BERTags.APPLICATION, 3, seq).getEncoded();
    }

    @Test

            ev.add(new DERTaggedObject(true, 0, new DERSequence(fields)));
            final ByteArrayOutputStream collector = new ByteArrayOutputStream();
            final ASN1OutputStream der = ASN1OutputStream.create(collector, ASN1Encoding.DER);
            final DERTaggedObject derApplicationSpecific = new DERTaggedObject(false, BERTags.APPLICATION, 0, new DERSequence(ev));
            der.writeObject(derApplicationSpecific);

        ev.add(new DERTaggedObject(true, 0, new DERSequence(fields)));

        ByteArrayOutputStream collector = new ByteArrayOutputStream();
        ASN1OutputStream der = ASN1OutputStream.create(collector, ASN1Encoding.DER);
        try {
            DERTaggedObject app = new DERTaggedObject(false, BERTags.APPLICATION, 0, new DERSequence(ev));
            der.writeObject(app);
        } finally {

import java.io.IOException;
import java.util.Arrays;

import org.bouncycastle.asn1.ASN1Encoding;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.ASN1OutputStream;
import org.bouncycastle.asn1.DERSequence;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jcifs.CIFSException;
import jcifs.Configuration;
import jcifs.spnego.NegTokenInit;
import jcifs.spnego.NegTokenTarg;