diff --git a/java-17-openjdk.spec b/java-17-openjdk.spec
index 6f77ec5..55e7b8a 100644
--- a/java-17-openjdk.spec
+++ b/java-17-openjdk.spec
@@ -2037,6 +2037,11 @@ export SEC_DEBUG="-Djava.security.debug=properties"
 $JAVA_HOME/bin/java ${SEC_DEBUG} ${PROG} true
 $JAVA_HOME/bin/java ${SEC_DEBUG} -Djava.security.disableSystemPropertiesFile=true ${PROG} false
 
+# Check blocked.certs is valid (OPENJDK-4362)
+jtreg_test=$(pwd)/%{top_level_dir_name}/test/jdk/sun/security/lib/CheckBlockedCerts.java
+jtreg_dir=$(dirname ${jtreg_test})
+$JAVA_HOME/bin/java --add-exports java.base/sun.security.util=ALL-UNNAMED -Dtest.src=${jtreg_dir} ${jtreg_test}
+
 # Check src.zip has all sources. See RHBZ#1130490
 unzip -l $JAVA_HOME/lib/src.zip | grep 'sun.misc.Unsafe'
 
@@ -2511,6 +2516,9 @@ cjc.mainProgram(args)
 %endif
 
 %changelog
+* Wed Feb 11 2026 Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.18.0.8-2
+- Add test to ensure blocked.certs is valid (OPENJDK-4362)
+
 * Wed Feb 11 2026 Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
 - Set rpmrelease to 2
 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9