rdnSequence,
    )

  /**
   * ```
   * SubjectPublicKeyInfo ::= SEQUENCE  {
   *   algorithm            AlgorithmIdentifier,
   *   subjectPublicKey     BIT STRING
   * }
   * ```
   */
  internal val subjectPublicKeyInfo: BasicDerAdapter<SubjectPublicKeyInfo> =
    Adapters.sequence(
      "SubjectPublicKeyInfo",
      algorithmIdentifier,
      Adapters.BIT_STRING,
      decompose = {

              ),
          ),
      ),
    )
  }

  /** Converts public key bytes to SubjectPublicKeyInfo bytes. */
  private fun encodeKey(
    algorithm: String,
    publicKeyBytes: ByteString,
  ): ByteString {
    val subjectPublicKeyInfo =
      SubjectPublicKeyInfo(
        algorithm = AlgorithmIdentifier(algorithm = algorithm, parameters = null),

        keySize = 2048
      }

    fun build(): HeldCertificate {
      // Subject keys & identity.
      val subjectKeyPair = keyPair ?: generateKeyPair()
      val subjectPublicKeyInfo =
        CertificateAdapters.subjectPublicKeyInfo.fromDer(
          subjectKeyPair.public.encoded.toByteString(),
        )
      val subject: List<List<AttributeTypeAndValue>> = subject()

  @Test fun `large object inside small object`() {
    val bytes = "301b300d06092a864886f70d010101050003847fffffff000504030201".decodeHex()
    assertFailsWith<ProtocolException> {
      CertificateAdapters.subjectPublicKeyInfo.fromDer(bytes)
    }.also { expected ->
      assertThat(expected.message).isEqualTo("enclosed object too large")
    }
  }