A DESCRIPTION OF THE REQUEST :
Currently when a CertPathValidator founds a particular path invalid it throws CertPathValidatorException. This exception does contain means (getCertPath, getIndex) to identify the certificate at fault, but no information about the reason of failure (like no trusted anchor, revoked et cetera).
Something like another method, say, getReason, returning an enumerable value would be handy.

JUSTIFICATION :
Sometimes application may have logic depending on this information. Another case is user interaction - to request user intervention depending on the cause of problem. (messages that supplement CertPathValidatorException aren't suitable of course, not localized and don't cover the case when the indication of the problem may be non-textual).


CUSTOMER SUBMITTED WORKAROUND :
  To implement the validation algorithm by oneself.