/** * Generate an X.509 certificate, based on the current issuer and subject using the passed in * signer. * * @param signer the content signer to be used to generate the signature validating the * certificate. * @return a holder containing the resulting signed certificate. */ public X509CertificateHolder build(ContentSigner signer) { tbsGen.setSignature(signer.getAlgorithmIdentifier()); if (!extGenerator.isEmpty()) { tbsGen.setExtensions(extGenerator.generate()); } return CertUtils.generateFullCert(signer, tbsGen.generateTBSCertificate()); }