from a real-world testing with SSLSockets being created concurrently (using ActiveMerchant)

after a while contetion seems to add up around ASN1ObjectIdentifier.getBody (using BC 1.50)

0.9.7 was initially tested, which revealed some contention in Sun's provider while loading the certificate :

this issue can be reproduced using 0.9.8 SNAPSHOT at 7e381cb (application was running for ~ 3 hours)

... in an attempt to consult BC's X.509 support when available ef2d1d9 (also due consistency since we're using it internally) ... the contention got much higher :

full stack-trace trees : https://gist.github.com/kares/e850554aa5756becfd91

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/16392701-contention-when-creating-sslsocket-due-x-509-certificate-loading?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github).