gen.setSerialNumber(BigInteger.ONE);
gen.setSignatureAlgorithm("SHA1WithRSAEncryption");
X509AttributeCertificate aCert = gen.generateCertificate(privKey, "BC");
aCert.checkValidity();
aCert.verify(pubKey, "BC");
AttributeCertificateHolder holder = aCert.getHolder();