// Invalid signature.
    val okHttpCertificateWithBadSignature =
      okHttpCertificate.copy(
        signatureValue =
          okHttpCertificate.signatureValue.copy(
            byteString = okHttpCertificate.signatureValue.byteString.offByOneBit(),
          ),
      )
    assertThat(okHttpCertificateWithBadSignature.checkSignature(root.keyPair.public)).isFalse()

        listOf(
          it.tbsCertificate,
          it.signatureAlgorithm,
          it.signatureValue,
        )
      },
      construct = {
        Certificate(
          tbsCertificate = it[0] as TbsCertificate,
          signatureAlgorithm = it[1] as AlgorithmIdentifier,
          signatureValue = it[2] as BitString,
        )
      },
    )

  /**
   * ```

        }

      // Complete signed certificate.
      val certificate =
        Certificate(
          tbsCertificate = tbsCertificate,
          signatureAlgorithm = signatureAlgorithm,
          signatureValue =
            BitString(
              byteString = signature,
              unusedBitsCount = 0,
            ),
        )

      return HeldCertificate(subjectKeyPair, certificate.toX509Certificate())

			t.Errorf("InvalidUnmarshalError mismatch\nGot:  %q\nWant: %q", g, w)
		}
	}
}

type Certificate struct {
	TBSCertificate     TBSCertificate
	SignatureAlgorithm AlgorithmIdentifier
	SignatureValue     BitString
}

type TBSCertificate struct {
	Version            int `asn1:"optional,explicit,default:0,tag:0"`
	SerialNumber       RawValue
	SignatureAlgorithm AlgorithmIdentifier