// a webid is not a good idea, but this will at least be something.
if (webId != null && webId.length() > 0) cn = webId;
else cn = "default name (please improve keygen UI code)";
}
Certificate cert;
if ((spkacData == null) || spkacData.isEmpty()) {
cert = keygen.createFromSpkac(spkacData);
} else {
cert = keygen.createFromPEM(pemCsrData);
}
cert.setSubjectCommonName(cn);
cert.addSubjectAlternativeName(webId);
cert.addDurationInDays("365");
cert.startEarlier("1"); //always start one hour earlier at least, to avoid clock synchronisation issues
cert.getSerialisation().writeTo(response);
} catch (Exception e) {
throw new ServletException("could not create certificate",e);
}
}