aki.Value, err = asn1.Marshal(authKeyId{Id: c.SubjectKeyId})
		if err != nil {
			return nil, err
		}
		tbsCertList.Extensions = append(tbsCertList.Extensions, aki)
	}

	tbsCertListContents, err := asn1.Marshal(tbsCertList)
	if err != nil {
		return nil, err
	}
	tbsCertList.Raw = tbsCertListContents

	signature, err := signTBS(tbsCertListContents, key, signatureAlgorithm, rand)
	if err != nil {

type CertificateList struct {
	TBSCertList        TBSCertificateList
	SignatureAlgorithm AlgorithmIdentifier
	SignatureValue     asn1.BitString
}

// HasExpired reports whether certList should have been updated by now.
func (certList *CertificateList) HasExpired(now time.Time) bool {
	return !now.Before(certList.TBSCertList.NextUpdate)
}

		if err != nil {
			t.Errorf("%s: error reparsing CRL: %s", test.name, err)
			continue
		}
		if !reflect.DeepEqual(parsedCRL.TBSCertList.RevokedCertificates, expectedCerts) {
			t.Errorf("%s: RevokedCertificates mismatch: got %v; want %v.", test.name,
				parsedCRL.TBSCertList.RevokedCertificates, expectedCerts)
		}
	}
}

func fromBase64(in string) []byte {

		{"AttributeTypeAndValueSET.Value", Field, 3},
		{"CertificateList", Type, 0},
		{"CertificateList.SignatureAlgorithm", Field, 0},
		{"CertificateList.SignatureValue", Field, 0},
		{"CertificateList.TBSCertList", Field, 0},
		{"Extension", Type, 0},
		{"Extension.Critical", Field, 0},
		{"Extension.Id", Field, 0},
		{"Extension.Value", Field, 0},
		{"Name", Type, 0},
		{"Name.CommonName", Field, 0},

pkg crypto/x509/pkix, type CertificateList struct, SignatureAlgorithm AlgorithmIdentifier
pkg crypto/x509/pkix, type CertificateList struct, SignatureValue asn1.BitString
pkg crypto/x509/pkix, type CertificateList struct, TBSCertList TBSCertificateList
pkg crypto/x509/pkix, type Extension struct
pkg crypto/x509/pkix, type Extension struct, Critical bool
pkg crypto/x509/pkix, type Extension struct, Id asn1.ObjectIdentifier