import org.bouncycastle.asn1.x509.KeyUsage; KeyUsage keyUsage = new KeyUsage(KeyUsage.keyCertSign | KeyUsage.cRLSign); X509Extension extension = new X509Extension(true, new DEROctetString(keyUsage));
import org.bouncycastle.asn1.x509.KeyUsage; KeyUsage keyUsage = new KeyUsage(KeyUsage.keyCertSign | KeyUsage.cRLSign); X509Extension extension = new X509Extension(true, new DEROctetString(keyUsage));