g.setThisUpdate(new Date());
g.setNextUpdate(Util.tomorrow());
g.setSignatureAlgorithm("SHA1withRSA");
g.addExtension(X509Extensions.CRLNumber, false,
new CRLNumber(BigInteger.TEN));
X509CRL x509crl = g.generate(kp.getPrivate());
List<CertificateSerial> serials = getStubCSList();
List<X509CRLEntryWrapper> entries = Util.newList();
for (CertificateSerial serial : serials) {
entries.add(new X509CRLEntryWrapper(serial.getSerial(),