X509Certificate[] () { myReadLock.lock(); try { // trust no one if broken if (keyStoreIsEmpty() || isBroken()) { return NO_CERTIFICATES; } return myTrustManager.getAcceptedIssuers(); } finally { myReadLock.unlock(); } }