The DefaultOptions.java test may fail when the jarsigner throws CertificateNotYetValidException because the certificate generation and jarsigner signing are called back-to-back. So the test may run fast enough that validation happens just before the NotBefore moment, and sometimes it doesn’t. This makes the test may fail intermittently.