gen.addRequest(new CertificateID(CertificateID.HASH_SHA1, cacert, cert.getSerialNumber()));
CertificateID certId = new CertificateID(CertificateID.HASH_SHA1, cacert, cert.getSerialNumber());         gen.addRequest(certId);
	public OCSPUnidResponse lookup(X509Certificate cert, X509Certificate cacert, boolean getfnr) throws OCSPException, IOException, GeneralSecurityException {        // See if we must try to get the ocsprul from the cert        if (httpReqPath == null) {            httpReqPath = CertTools.getAuthorityInformationAccessOcspUrl(cert);            // If we didn't pass a url to the constructor and the cert does not have the URL, we will fail...            if (httpReqPath == null) {                OCSPUnidResponse ret = new OCSPUnidResponse();                ret.setErrorCode(OCSPUnidResponse.ERROR_NO_OCSP_URI);                return ret;            }        }        // And an OCSP request        OCSPReqGenerator gen = new OCSPReqGenerator();        gen.addRequest(new CertificateID(CertificateID.HASH_SHA1, cacert, cert.getSerialNumber()));        // Don't bother adding Unid extension of we are not using client authentication        if (ks != null) {            Hashtable exts = new Hashtable();            X509Extension ext = new X509Extension(false, new DEROctetString(new FnrFromUnidExtension("1")));            exts.put(FnrFromUnidExtension.FnrFromUnidOid, ext);            gen.setRequestExtensions(new X509Extensions(exts));        	        }        OCSPReq req = gen.generate();        // Send the request and receive a BasicResponse        OCSPUnidResponse ret = sendOCSPPost(req.getEncoded());        return ret;	}