CRL解析demo

public static Set getRevokedCertSnSet(byte[] crlFileBytes) throws CRLException, IOException, CertificateException {
    InputStream fis = new ByteArrayInputStream(crlFileBytes);
    CertificateFactory cf = CertificateFactory.getInstance("X.509");
    X509CRL aCrl = (X509CRL) cf.generateCRL(fis);
    Set tSet = aCrl.getRevokedCertificates();
    Iterator tIterator = tSet.iterator();
    Set set=new HashSet();
    while (tIterator.hasNext()) {
        X509CRLEntry tEntry = (X509CRLEntry) tIterator.next();
        String sn = tEntry.getSerialNumber().toString(16).toUpperCase();
        set.add(sn);
    }
    return set;
}