authElementVector.add(new DERTaggedObject(1, new DEROctetString(new byte[] { 1, 2, 3, 4 })));
        authDataVector.add(new DERSequence(authElementVector));
        vector.add(new DERTaggedObject(10, new DERSequence(authDataVector)));

        DERSequence sequence = new DERSequence(vector);
        byte[] encoded = new DERTaggedObject(false, BERTags.APPLICATION, 1, sequence).getEncoded();

        // but shows that APPLICATION tag is properly recognized
        DERSequence emptyBase = new DERSequence(new ASN1EncodableVector());
        DERTaggedObject appTag = new DERTaggedObject(false, BERTags.APPLICATION, 3, emptyBase);
        v.add(appTag);
        ASN1Sequence seq = new DERSequence(v);

        // Act + Assert

        principalVector.add(new DERTaggedObject(true, 1, new DERSequence(principalNameVector)));
        v.add(new DERTaggedObject(true, 3, new DERSequence(principalVector)));

        // Wrap in APPLICATION tag as expected by KerberosEncData
        DERSequence seq = new DERSequence(v);
        return new DERTaggedObject(false, BERTags.APPLICATION, 3, seq).getEncoded();
    }

    @Test

        authVector.add(new DERSequence(elementVector1));

        ASN1EncodableVector elementVector2 = new ASN1EncodableVector();
        elementVector2.add(new DERTaggedObject(0, new ASN1Integer(2)));
        elementVector2.add(new DERTaggedObject(1, new DEROctetString(new byte[] { 0x02 })));
        authVector.add(new DERSequence(elementVector2));

        byte[] token = new DERSequence(authVector).getEncoded();

        innerContent.write(0x01); // magic byte 1
        innerContent.write(0x00); // magic byte 2

        // Add a sequence instead of APPLICATION tagged object
        DERSequence wrongTag = new DERSequence(new ASN1Encodable[] { new ASN1Integer(5) });
        innerContent.write(wrongTag.getEncoded());

        byte[] content = innerContent.toByteArray();

        // Create GSS-API wrapper

            ev.add(new DERTaggedObject(true, 0, new DERSequence(fields)));
            final ByteArrayOutputStream collector = new ByteArrayOutputStream();
            final ASN1OutputStream der = ASN1OutputStream.create(collector, ASN1Encoding.DER);
            final DERTaggedObject derApplicationSpecific = new DERTaggedObject(false, BERTags.APPLICATION, 0, new DERSequence(ev));
            der.writeObject(derApplicationSpecific);

        ev.add(new DERTaggedObject(true, 0, new DERSequence(fields)));

        ByteArrayOutputStream collector = new ByteArrayOutputStream();
        ASN1OutputStream der = ASN1OutputStream.create(collector, ASN1Encoding.DER);
        try {
            DERTaggedObject app = new DERTaggedObject(false, BERTags.APPLICATION, 0, new DERSequence(ev));
            der.writeObject(app);
        } finally {

import org.bouncycastle.asn1.ASN1InputStream;
import org.bouncycastle.asn1.ASN1Integer;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.DERSequence;
import org.bouncycastle.asn1.DERTaggedObject;
import org.bouncycastle.asn1.DLSequence;
import org.junit.jupiter.api.Test;

/**
 * Tests for the {@link ASN1Util} class.
 */
class ASN1UtilTest {

import org.bouncycastle.asn1.ASN1OutputStream;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.DEROctetString;
import org.bouncycastle.asn1.DERSequence;
import org.bouncycastle.asn1.DERTaggedObject;

/**
 * SPNEGO response token (NegTokenTarg) used in SPNEGO authentication exchanges
 */
public class NegTokenTarg extends SpnegoToken {

    /**

import java.io.IOException;
import java.util.Arrays;

import org.bouncycastle.asn1.ASN1Encoding;
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.bouncycastle.asn1.ASN1OutputStream;
import org.bouncycastle.asn1.DERSequence;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jcifs.CIFSException;
import jcifs.Configuration;
import jcifs.spnego.NegTokenInit;
import jcifs.spnego.NegTokenTarg;