// Act
        KerberosApRequest req = new KerberosApRequest(seq, null);

        // Assert
        assertEquals(ap, req.getApOptions(), "apOptions should reflect BIT STRING's first byte");
        assertNull(req.getTicket(), "ticket should be null when tag 3 is absent");
    }

    @ParameterizedTest
    @ValueSource(ints = { 0, 4, 6, 99 })
    @DisplayName("seq ctor: invalid pvno values throw")