See: http://cr.openjdk.java.net/~mullan/webrevs/8025708/webrev/
This fixes a problem with the PKIX CertPathBuilder where it wasn't able to build a path when the Authority Key Identifier extension of an intermediate CA cert did not contain a serial number field, and the end entity cert did.
The problem was in the AdaptableX509CertSelector class. It was reusing this selector without re-initializing certain fields. I changed the implementation of this class so that it doesn't have this issue anymore.
Thanks, Sean