// we're using a cert validator that will validate certs either if they
// belong to the expected signer of the XRD, or if they're signed
// by Google.
@Provides @Singleton
public CertValidator provideCertValidator(DefaultCertValidator defaultValidator) {
CertValidator hardCodedValidator = new CnConstraintCertValidator() {
@Override
protected String getRequiredCn(String authority) {
return "hosted-id.google.com";
}
};