assertThrows(PACDecodingException.class, () -> new KerberosApRequest(seq, null));
    }

    @Test
    @DisplayName("seq ctor: tag 3 APPLICATION triggers ticket parsing")
    void sequenceConstructor_ticketTag_application_triggersTicketParsing() throws Exception {
        // Arrange: minimal valid fields + APPLICATION tag 3
        ASN1EncodableVector v = new ASN1EncodableVector();
        byte ap = (byte) 0x12;