false, false, null, false, false);
// According to the RFC, IDP must be a critical extension.
// Nonetheless, at the moment, Mozilla is not able to correctly
// handle the IDP extension and discards the CRL if it is critical.
crlgen.addExtension(X509Extensions.IssuingDistributionPoint.getId(),
getCrlDistributionPointOnCrlCritical(), idp);
}
if (!isDeltaCRL) {
String crlFreshestDP = getCADefinedFreshestCRL();