public static void validateCert(X509Certificate certificate) throws Exception {

// - проверка на срок действия
Date currentDate = new Date();
if( ! (certificate.getNotBefore().before(currentDate) && certificate.getNotAfter().after(currentDate)) ) {
MessageBox.post("Срок действия сертификата истёк, или не начал действовать", "Ошибка!", MessageBox.ERROR);
throw new Exception("Просроченный сертификат");
}
else {

System.setProperty("ru.CryptoPro.reprov.enableCRLDP", "false");
System.setProperty("com.sun.security.enableCRLDP", "false");
System.setProperty("com.ibm.security.enableCRLDP", "false");
System.setProperty("ocsp.enable", "false");
System.setProperty("com.sun.net.ssl.checkRevocation", "false");

final CertificateFactory cf = CertificateFactory.getInstance("X509");

final Certificate user = certificate;
Certificate root_test = cf.generateCertificate(new FileInputStream(new File("").getAbsolutePath() + "\\CertificatesStore\\certnew.cer"));

final Certificate[] certs = new Certificate[2];
certs[0] = user;
certs[1] = root_test;

final Set<TrustAnchor> trust = new HashSet<TrustAnchor>(1);
trust.add(new TrustAnchor((X509Certificate) root_test, null));

final List cert = new ArrayList(0);
for (int i = 0; i < certs.length; i++)
cert.add(certs[i]);

final PKIXBuilderParameters cpp = new PKIXBuilderParameters(trust, null);
cpp.setSigProvider(null);

final CollectionCertStoreParameters par =
new CollectionCertStoreParameters(cert);

final CertStore store = CertStore.getInstance("Collection", par);
cpp.addCertStore(store);

final X509CertSelector selector = new X509CertSelector();
selector.setCertificate((X509Certificate) user);

cpp.setTargetCertConstraints(selector);
cpp.setRevocationEnabled(false);

// - списки отзывов
Set<X509CRL> crlListForCheck = new HashSet<>();
X509CRL crl_ = (X509CRL) CertificateFactory.getInstance("X.509").generateCRL(new FileInputStream(new File("").getAbsolutePath() + "\\CertificatesStore\\certcrl.crl"));
crlListForCheck.add(crl_);

final CollectionCertStoreParameters parCrl =
new CollectionCertStoreParameters(crlListForCheck); //certs
// создание специального хранилища отзывов сертификатов на основе
// параметров, определенных списком сертификатов
final CertStore storeCrl = CertStore.getInstance("Collection", parCrl);
cpp.addCertStore(storeCrl);

// Построение цепочки.
final PKIXCertPathBuilderResult res =
(PKIXCertPathBuilderResult) CertPathBuilder.
getInstance("CPPKIX", "RevCheck").build(cpp);

final CertPath cp = res.getCertPath();
System.out.println("OK-1");

// Проверка цепочки.
final CertPathValidator cpv = CertPathValidator.getInstance("CPPKIX", "RevCheck");
//cpp.setRevocationEnabled(true);

cpv.validate(cp, cpp);
System.out.println("OK-2");
}

}