private void AddRootAuthorityCertificateExtensions(X509V3CertificateGenerator builder)
{
builder.AddExtension(X509Extensions.BasicConstraints, true, new BasicConstraints(true));
builder.AddExtension(X509Extensions.KeyUsage, true, new KeyUsage(KeyUsage.KeyCertSign | KeyUsage.CrlSign));
}