@Test
public void testIsRestrictedCertificateNotMatched() throws Exception {

    System.setProperty("athenz.crypto.restricted_ou", "other.ou");
    GlobStringsMatcher globStringsMatcher = new GlobStringsMatcher(ATHENZ_PROP_RESTRICTED_OU);
    try (InputStream inStream = new FileInputStream("src/test/resources/valid_email_x509.cert")) {
        CertificateFactory cf = CertificateFactory.getInstance("X.509");
        X509Certificate cert = (X509Certificate) cf.generateCertificate(inStream);
        boolean restrictedCertificate = Crypto.isRestrictedCertificate(cert, globStringsMatcher);
        assertFalse(restrictedCertificate);
    } finally {
        System.clearProperty("athenz.crypto.restricted_ou");
    }
}