--- a/jdk/src/share/classes/sun/security/x509/X509CertImpl.java	Tue Nov 19 17:49:57 2013 +0000
+++ b/jdk/src/share/classes/sun/security/x509/X509CertImpl.java	Tue Nov 19 17:55:43 2013 +0000
@@ -1109,6 +1109,20 @@
     }
 
     /**
+     * Returns the subject's key identifier, or null
+     */
+    public KeyIdentifier getSubjectKeyId() {
+        SubjectKeyIdentifierExtension ski = getSubjectKeyIdentifierExtension();
+        if (ski != null) {
+            try {
+                return (KeyIdentifier)ski.get(
+                    SubjectKeyIdentifierExtension.KEY_ID);
+            } catch (IOException ioe) {} // not possible
+        }
+        return null;
+    }
+
+    /**
      * Get AuthorityKeyIdentifier extension
      * @return AuthorityKeyIdentifier object or null (if no such object
      * in certificate)