X509CertificateBuilder | 
X509CertificateBuilder.extendedKeyUsage(boolean isCritical,
                EnumSet<X509CertificateBuilder.ExtendedKeyUsage> extendedKeyUsages) | 
 Adds the extended key usage extension with the provided usages. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.isCa() | 
 Identifies the certificate as a CA certificate by adding the basic constraint extension. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.issuerDn(Dn issuerDn) | 
 Sets the certificate issuer name. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.keyUsage(boolean isCritical,
        EnumSet<X509CertificateBuilder.KeyUsage> keyUsages) | 
 Adds the key usage extension with the provided usages. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.publicKey(PublicKey publicKey) | 
 Sets the certificate public key. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.serialNumber(BigInteger serialNumber) | 
 Sets the certificate serial number. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.signature(Signature signatureAlgorithm,
         String algorithmOid,
         PrivateKey privateKey) | 
 Sets the key and signature algorithm for signing the certificate. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.signature(Signature signatureAlgorithm,
         String algorithmOid,
         PrivateKey privateKey,
         SecureRandom random) | 
 Sets the key and signature algorithm for signing the certificate. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.subjectAlternativeName(boolean isCritical,
                      Collection<String> dnsNames) | 
 Adds the subject alternative name extension with the provided DNS names. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.subjectDn(Dn subjectDn) | 
 Sets the certificate subject name. 
 | 
X509CertificateBuilder | 
X509CertificateBuilder.validity(Instant notBefore,
        Instant notAfter) | 
 Sets the certificate validity period. 
 |