in.defaultReadObject();
try {
byte b[] = (byte []) in.readObject();
CertificateFactory cf =
CertificateFactory.getInstance("X509");
certificate = cf.generateCertificate(new
ByteArrayInputStream(b));
} catch (CertificateException ce) {
throw new IOException("Can't de-serialize object " + ce);
}