// Act + Assert
        // The KerberosTicket constructor will throw because the empty sequence is not a valid ticket
        assertThrows(PACDecodingException.class, () -> new KerberosApRequest(seq, new KerberosKey[0]));

        // Verify apOptions is set correctly in a minimal sequence without ticket
        KerberosApRequest req = new KerberosApRequest(buildMinimalApReqSeq(ap), null);
        assertEquals(ap, req.getApOptions());

            // When
            KerberosTicket ticket = new KerberosTicket(validToken, (byte) 0, keys);

            // Then
            assertNotNull(ticket);
            assertEquals(SERVER_REALM, ticket.getServerRealm());
            assertEquals(SERVER_PRINCIPAL_NAME, ticket.getServerPrincipalName());
            assertNotNull(ticket.getEncData());

            if (derToken.getTagClass() != BERTags.APPLICATION) {
                throw new PACDecodingException("Malformed kerberos ticket");
            }
            stream.close();
        } catch (IOException e) {
            throw new PACDecodingException("Malformed kerberos ticket", e);
        }

        ASN1Sequence sequence;
        try {
            sequence = ASN1Util.as(ASN1Sequence.class, derToken.getBaseObject());

        for (KerberosTicket ticket : subject.getPrivateCredentials(KerberosTicket.class)) {
            MIEName client = new MIEName(mech, ticket.getClient().getName());
            MIEName server = new MIEName(mech, ticket.getServer().getName());
            if (src.equals(client) && targ.equals(server)) {
                return ticket.getSessionKey();
            }
        }
        return null;

     * Program will use this name to require service ticket from KDC.
     *
     * @param name
     *            the service name used to require service ticket from KDC.
     */
    public void setService(String name) {
        this.service = name;
    }

    /**
     * Get the service name.
     *
     * @return the service name used to require service ticket from KDC
     */
    public String getService() {