I will answer to my own questions, but not delete it, in case someone else got the same problems:
return new JcaX509CertificateConverter().setProvider( "BC" )
.getCertificate( certificateHolder );
And for attribute certificates:
return new X509V2AttributeCertificate( attributeCertificateHolder.getEncoded() );
Not nice, as it is encoding and decoding, but it works.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…