* are parsed. Android fails to parse these, which means we fall back to the CN. The RI does parse
   * them, so the CN is unused.
   */
  @Test fun verifyNonAsciiSubjectAlt() {
    // Expecting actual:
    //  ["bar.com", "花子.co.jp"]
    // to contain exactly (and in same order):
    //  ["bar.com", "������.co.jp"]
    platform.assumeNotBouncyCastle()

    // CN=foo.com, subjectAlt=bar.com, subjectAlt=花子.co.jp

        assertEquals("aaa", ldapManager.getSearchRoleName("cn=aaa"));
        assertEquals("aaa", ldapManager.getSearchRoleName("CN=aaa"));
        assertEquals("aaa", ldapManager.getSearchRoleName("cn=aaa,du=test"));
        assertEquals("aaa\\bbb", ldapManager.getSearchRoleName("cn=aaa\\bbb"));
        assertEquals("aaa\\bbb", ldapManager.getSearchRoleName("cn=aaa\\bbb,du=test"));

cloudns.ph
cloudns.pro
cloudns.pw
cloudns.us
cloudsite.builders
cloudycluster.net
club
club.aero
club.tw
clubmed
cm
cn
cn-north-1.eb.amazonaws.com.cn
cn-northwest-1.eb.amazonaws.com.cn
cn.com
cn.eu.org
cn.in
cn.it
cn.ua
cng.br
cnpy.gdn
cnt.br
co
co.ae
co.ag
co.am
co.ao
co.at
co.bb
co.bi
co.biz.ng
co.bj
co.bn

cloudns.ph
cloudns.pro
cloudns.pw
cloudns.us
cloudsite.builders
cloudycluster.net
club
club.aero
club.tw
clubmed
cm
cn
cn-north-1.eb.amazonaws.com.cn
cn-northwest-1.eb.amazonaws.com.cn
cn.com
cn.eu.org
cn.in
cn.it
cn.ua
cng.br
cnpy.gdn
cnt.br
co
co.ae
co.ag
co.am
co.ao
co.at
co.bb
co.bi
co.biz.ng
co.bj
co.bn

    val response = call.execute()
    assertThat(response.handshake!!.peerPrincipal)
      .isEqualTo(X500Principal("CN=Local Host"))
    assertThat(response.handshake!!.localPrincipal)
      .isEqualTo(X500Principal("CN=Jethro Willis"))
    assertThat(response.body.string()).isEqualTo("abc")
  }

  @Test
  fun clientAuthForNeeds() {

co.cm
com.cm
gov.cm
net.cm

// cn : https://www.iana.org/domains/root/db/cn.html
// Submitted by registry <tanyaling@cnnic.cn>
cn
ac.cn
com.cn
edu.cn
gov.cn
net.cn
org.cn
mil.cn
公司.cn
网络.cn
網絡.cn
// cn geographic names
ah.cn
bj.cn
cq.cn
fj.cn
gd.cn
gs.cn
gz.cn
gx.cn
ha.cn
hb.cn
he.cn
hi.cn
hl.cn
hn.cn
jl.cn
js.cn
jx.cn

    checkPublicSuffix("www.test.k12.ak.us", "test.k12.ak.us")
    // IDN labels.
    checkPublicSuffix("食狮.com.cn", "食狮.com.cn")
    checkPublicSuffix("食狮.公司.cn", "食狮.公司.cn")
    checkPublicSuffix("www.食狮.公司.cn", "食狮.公司.cn")
    checkPublicSuffix("shishi.公司.cn", "shishi.公司.cn")
    checkPublicSuffix("公司.cn", null)
    checkPublicSuffix("食狮.中国", "食狮.中国")
    checkPublicSuffix("www.食狮.中国", "食狮.中国")

          "rules_path": "${fess.dictionary.path}ru/stemmer_override.txt"
        },
        "simplified_chinese_stop": {
          "type":       "stop",
          "stopwords_path": "${fess.dictionary.path}zh-cn/stopwords.txt"
        },
        "sorani_stop": {
          "type":       "stop",
          "stopwords_path": "${fess.dictionary.path}ckb-iq/stopwords.txt"
        },
        "sorani_keywords": {

          "match": "*_vi",
          "mapping": {
            "type": "text",
            "analyzer": "empty_analyzer"
          }
        }
      },
      {
        "lang_zh-cn": {
          "match": "*_zh-cn",
          "mapping": {
            "type": "text",
            "analyzer": "simplified_chinese_analyzer"
          }
        }
      },
      {
        "lang_zh-tw": {

          // keep-sorted end
          );

  private static final ImmutableSet<String> RS =
      ImmutableSet.of(
          // keep-sorted start
          "\u7f51\u7edc.Cn", // "网络.Cn"
          "co.uk",
          "co.uk.", // Trailing dot
          "co\uFF61uk", // Alternate dot character
          "com",
          "foo.bd",
          "org.mK",
          "us",