dr.domain = n.getDomain();
        return dr;
    }

    /*
     * Split DFS path like \fs1.example.com\root5\link2\foo\bar.txt into at
     * most 3 components (not including the first index which is always empty):
     * result[0] = ""
     * result[1] = "fs1.example.com"
     * result[2] = "root5"
     * result[3] = "link2\foo\bar.txt"
     */

    }

    /* DFS */

    /* Split DFS path like \fs1.example.com\root5\link2\foo\bar.txt into at
     * most 3 components (not including the first index which is always empty):
     * result[0] = ""
     * result[1] = "fs1.example.com"
     * result[2] = "root5"
     * result[3] = "link2\foo\bar.txt"
     */
    void dfsPathSplit(final String path, final String[] result) {

  @Test
  fun equalsFromCertificate() {
    val rootA =
      HeldCertificate
        .Builder()
        .serialNumber(1L)
        .build()
    val rootB =
      HeldCertificate
        .Builder()
        .serialNumber(2L)
        .build()
    assertThat(get(rootB.certificate, rootA.certificate))
      .isEqualTo(get(rootA.certificate, rootB.certificate))
  }

  @Test
  fun equalsFromTrustManager() {

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          check-latest: true
      - name: Start root lockdown tests
        run: |

            if (roots != null) {
                SmbTransport trans = null;

                root = root.toLowerCase();

                /* The link entries contain maps of referrals by path representing DFS links.
                 * Note that paths are relative to the root like "\" and not "\example.com\root".
                 */
                CacheEntry links = (CacheEntry) roots.get(root);

                }

                root = root.toLowerCase();
                /*
                 * domain-based DFS root shares to links for each
                 */
                final Map<String, CacheEntry<DfsReferralDataInternal>> roots = domains.get(domain);
                if (roots != null) {
                    dr = getLinkReferral(tf, domain, root, path, now, roots);
                }

/**
 * MSRPC implementation for enumerating DFS roots.
 * This class provides functionality to enumerate Distributed File System (DFS)
 * roots on a server using the NetDFS RPC interface.
 */
public class MsrpcDfsRootEnum extends netdfs.NetrDfsEnumEx {

    /**
     * Creates a new DFS root enumeration request for the specified server.
     *
     * @param server the server name to enumerate DFS roots from
     */

/**
 * MSRPC implementation for enumerating DFS roots.
 * This class provides functionality to enumerate Distributed File System (DFS)
 * roots on a server using the NetDFS RPC interface.
 */
public class MsrpcDfsRootEnum extends netdfs.NetrDfsEnumEx {

    /**
     * Creates a new DFS root enumeration request for the specified server.
     *
     * @param server the server name to enumerate DFS roots from
     */

 *    certificates to establish trust from a root certificate to the server's certificate. The root
 *    certificate is not included in this chain.
 *  * The client's handshake certificates must include a set of trusted root certificates. They will
 *    be used to authenticate the server's certificate chain. Typically this is a set of well-known
 *    root certificates that is distributed with the HTTP client or its platform. It may be

starting with its own and including everything up-to but not including the root. We don't need to
include root certificates because the client already has them.

```java
HandshakeCertificates serverHandshakeCertificates = new HandshakeCertificates.Builder()
    .heldCertificate(serverCertificate, intermediateCertificate.certificate())
    .build();
```

The client only needs to know the trusted root certificate. It checks the server's certificate by