extgen.addExtension(new DERObjectIdentifier("2.16.840.1.113730.1.1"), false, new NetscapeCertType(NetscapeCertType.objectSigningCA));
// My completely own
extgen.addExtension(new DERObjectIdentifier("1.1.1.1.1"), false, new DERIA5String("PrimeKey"));
// Make the complete extension package
X509Extensions exts = extgen.generate();
// First test without extension override
PKIMessage one = genCertReq(issuerDN2, userDN2, keys, cacert2, nonce, transid, true, exts, null, null, null);
PKIMessage req = protectPKIMessage(one, false, PBEPASSWORD, "KeyId2", 567);