JcaX509ExtensionUtils jxeu = new JcaX509ExtensionUtils();
if (baseCrt != null) {
byte[] sans = baseCrt.getExtensionValue(X509Extension.subjectAlternativeName.getId());
if (sans != null) {
certificateBuilder.copyAndAddExtension(X509Extension.subjectAlternativeName, true, baseCrt);
}
}
SubjectKeyIdentifier subjectKeyIdentifier = jxeu.createSubjectKeyIdentifier(pubKey);
certificateBuilder.addExtension(