The DER decoding code used by Sun crypto providers will allow constructed values in strict DER mode. The correct behavior is to throw an exception in this case. This issue affects signatures and any other objects that are read in strict DER mode.