}
        }
    }

    /**
     * Get the AP options flags.
     *
     * @return the AP options byte
     */
    public byte getApOptions() {
        return this.apOptions;
    }

    /**
     * Get the Kerberos ticket from this AP request.
     *
     * @return the Kerberos ticket
     */
    public KerberosTicket getTicket() {

        byte ap = (byte) 0x7A;
        ASN1Sequence seq = buildMinimalApReqSeq(ap);

        // Act
        KerberosApRequest req = new KerberosApRequest(seq, null);

        // Assert
        assertEquals(ap, req.getApOptions(), "apOptions should reflect BIT STRING's first byte");
        assertNull(req.getTicket(), "ticket should be null when tag 3 is absent");
    }

    @ParameterizedTest
    @ValueSource(ints = { 0, 4, 6, 99 })