g.setIssuerDN(new X500Principal("CN=test, UID=" + UUID.randomUUID()));
g.setThisUpdate(new Date());
g.setNextUpdate(Util.tomorrow());
g.setSignatureAlgorithm("SHA1withRSA");
g.addExtension(X509Extensions.CRLNumber, false,
new CRLNumber(BigInteger.TEN));
X509CRL x509crl = g.generate(kp.getPrivate());
List<CertificateSerial> serials = getStubCSList();
List<X509CRLEntryWrapper> entries = Util.newList();
for (CertificateSerial serial : serials) {