gen.addExtension("1.1", true, new DEROctetString(new byte[10]));
gen.addExtension("2.2", false, new DEROctetString(new byte[20]));
aCert = gen.generateCertificate(privKey, "BC");
Set exts = aCert.getCriticalExtensionOIDs();
if (exts.size() != 1 || !exts.contains("1.1"))
{