for (X509CRLEntryWrapper entry : entries) {
generator.addCRLEntry(entry.getSerialNumber(), entry.getRevocationDate(),
CRLReason.privilegeWithdrawn);
}
log.info("Completed adding CRL numbers to the certificate.");
generator.addExtension(X509Extensions.AuthorityKeyIdentifier,
false, new AuthorityKeyIdentifierStructure(caCert));
generator.addExtension(X509Extensions.CRLNumber, false,
new CRLNumber(crlNumber));
return generator.generate(reader.getCaKey());
}