X509v2CRLBuilder builder = new X509v2CRLBuilder(bcRequest.getIssuerX500Name(), now);
builder.setNextUpdate(bcRequest.getNextUpdate());
X509Certificate certificate = bcRequest.getIssuerCertificate();
AuthorityKeyIdentifier authorityKeyIdentifier = new JcaX509ExtensionUtils().createAuthorityKeyIdentifier(certificate);
builder.addExtension(X509Extension.authorityKeyIdentifier, false, authorityKeyIdentifier);
builder.addExtension(X509Extension.cRLNumber, false, new CRLNumber(bcRequest.getNumber()));
if (bcRequest.getOldCrl() != null) {
X509CRLHolder current = new X509CRLHolder(bcRequest.getOldCrl());