g.setIssuerDN(new X500Principal("CN=test, UID=" + UUID.randomUUID()));
g.setThisUpdate(new Date());
g.setNextUpdate(Util.tomorrow());
g.setSignatureAlgorithm("SHA1withRSA");
g.addExtension(X509Extensions.CRLNumber, false,
new CRLNumber(BigInteger.TEN));
X509CRL x509crl = g.generate(kp.getPrivate());
assertEquals("10", pkiUtility.decodeDERValue(x509crl.getExtensionValue(
X509Extensions.CRLNumber.getId())));