certGen.addExtension(X509Extensions.AuthorityKeyIdentifier, false,
new AuthorityKeyIdentifierStructure(keyPair.getPublic()));
certGen.addExtension(X509Extensions.SubjectKeyIdentifier, false,
new SubjectKeyIdentifierStructure(keyPair.getPublic()));
return certGen.generate(keyPair.getPrivate()); // note: private key of CA
}
public static byte[] getCertificateAsBytes(final X509Certificate cert) throws IOException {
StringWriter writer = new StringWriter();
PEMWriter pemW = new PEMWriter(writer);