Implement Java code to handle Certificates

As a entry test for more work in a security related project we need your expertise to show us: PKI environment is elliptic curve with prime256v1, ecdsa-with-SHA256 as X.509v3 CA side (a unit test) - create a keypair for the CA with CN=myCA - create a CSR - do the selfsigning of the CA key (as separate step) - 30 years valid - persist all relevant details for the CA into the file system server side (a different unit test) - create a keypair for the server with CN=ThisIsMyServer - create a CSR - do the signing with the CA (as separate step) - configure the - persist the serial onto the filesystem for the clients (a different unit test) - create a 10 keypairs for the clients with CN=ThisIsMyClient[number] - create a CSR - do the signing with the CA (as separate step) - persist the serial onto the filesystem ensure to set valid extensions: AuthorityKeyIdentifier SubjectKeyIdentifier KeyUsage digitalSignature nonRepudiation (contentCommitment) keyEncipherment dataEncipherment keyAgreement keyCertSign cRLSign encipherOnly decipherOnly ExtendedKeyUsage persist the keys, certs and so on in the commonly known file formats. - PEM - PKCS format for the keypairs delivery can be done as ZIP or into a git repo You can use these libs: - any apache commons lib - bouncy castle if needed (prefer to stick to native java) - JDK8 required - deps management: use maven MS1: 10% key + CSR generation for all steps MS2: 20% CA infrastructure is implemented MS3: 50% signing of all server and client certificates is implemented along with the suggested extensions bonus 25% if you deliver till monday 11.Nov.2019 08:00 CET bonus 15% if you deliver till monday 11.Nov.2019 23:00 CET bonus 10% if you deliver till tuesday 12.Nov.2019 12:00 CET