in jsign-core/src/main/java/net/jsign/AuthenticodeSigner.java [452:466]
private List<Certificate> removeRoot(Certificate[] certificates) {
List<Certificate> list = new ArrayList<>();
if (certificates.length == 1) {
list.add(certificates[0]);
} else {
for (Certificate certificate : certificates) {
if (!isSelfSigned((X509Certificate) certificate)) {
list.add(certificate);
}
}
}
return list;
}