@Test
public void testGetValidatedX509CertRecord() throws IOException {

    ChangeLogStore structStore = new ZMSFileChangeLogStore("/tmp/zts_server_unit_tests/zts_root",
            privateKey, "0");
    DataStore store = new DataStore(structStore, null);
    ZTSImpl ztsImpl = new ZTSImpl(mockCloudStore, store);
    SignedDomain providerDomain = signedAuthorizedProviderDomain();
    store.processDomain(providerDomain, false);
    SignedDomain tenantDomain = signedBootstrapTenantDomain("athenz.provider", "athenz", "production");
    store.processDomain(tenantDomain, false);
    InstanceCertManager instanceCertManager = Mockito.mock(InstanceCertManager.class);
    Mockito.when(instanceCertManager.getX509CertRecord("athenz.provider", "1001", "athenz.production"))
            .thenReturn(null);
    Mockito.when(instanceCertManager.insertX509CertRecord(Mockito.any())).thenReturn(true);
    ztsImpl.instanceCertManager = instanceCertManager;
    Path path = Paths.get("src/test/resources/athenz.instanceid.pem");
    String pem = new String(Files.readAllBytes(path));
    X509Certificate cert = Crypto.loadX509Certificate(pem);
    CertificateAuthority certAuthority = new CertificateAuthority();
    SimplePrincipal principal = (SimplePrincipal) SimplePrincipal.create("athenz", "production",
            "v=S1;d=athenz;n=production;s=signature", 0, certAuthority);
    ResourceContext context = createResourceContext(principal);
    ztsImpl.x509CertRefreshResetTime = cert.getNotBefore().getTime() + 1;
    X509CertRecord certRecord =  ztsImpl.getValidatedX509CertRecord(context, "athenz.provider",
            "1001", "athenz.production", cert, "caller", "athenz", "athenz",
            "localhost");
    assertNotNull(certRecord);
}