setAllowValidityOverride(true);
    public RootCACertificateProfile() {      setType(TYPE_ROOTCA);      setUseKeyUsage(true);      setKeyUsage(new boolean[9]);      setKeyUsage(DIGITALSIGNATURE,true);      setKeyUsage(KEYCERTSIGN,true);      setKeyUsage(CRLSIGN,true);      setKeyUsageCritical(true);          }