import org.bouncycastle.ocsp.CertificateID; //导入依赖的package包/类
public static OCSPReq GenOcspReq(X509Certificate nextCert,
		X509Certificate nextIssuer) throws OCSPException {

	OCSPReqGenerator ocspRequestGenerator = new OCSPReqGenerator();
	CertificateID certId = new CertificateID(CertificateID.HASH_SHA1,
			nextIssuer, nextCert.getSerialNumber());
	ocspRequestGenerator.addRequest(certId);

	BigInteger nonce = BigInteger.valueOf(System.currentTimeMillis());
	Vector<DERObjectIdentifier> oids = new Vector<DERObjectIdentifier>();
	Vector<X509Extension> values = new Vector<X509Extension>();

	oids.add(OCSPObjectIdentifiers.id_pkix_ocsp_nonce);
	values.add(new X509Extension(false, new DEROctetString(nonce
			.toByteArray())));

	ocspRequestGenerator.setRequestExtensions(new X509Extensions(oids,
			values));
	return ocspRequestGenerator.generate();
}
 

import org.bouncycastle.ocsp.CertificateID; //导入依赖的package包/类
/**
 * Method for creating CertificateID for OCSP request
 * @param signersCert
 * @param caCert
 * @param provider
 * @return
 * @throws NoSuchAlgorithmException
 * @throws NoSuchProviderException
 * @throws CertificateEncodingException
 */
private CertificateID creatCertReq(X509Certificate signersCert, X509Certificate caCert)
	throws NoSuchAlgorithmException, NoSuchProviderException, 
	CertificateEncodingException, DigiDocException, Exception
{
	return new CertificateID(CertificateID.HASH_SHA1, caCert, signersCert.getSerialNumber());
}