code: private ASN1EncodableVector buildUnauthenticatedAttributes(byte[] timeStampToken)  throws IOException {
          if (timeStampToken == null)
              return null;
  
          // @todo: move this together with the rest of the defintions
          String ID_TIME_STAMP_TOKEN = "1.2.840.113549.1.9.16.2.14"; // RFC 3161 id-aa-timeStampToken
  
          ASN1InputStream tempstream = new ASN1InputStream(new ByteArrayInputStream(timeStampToken));
          ASN1EncodableVector unauthAttributes = new ASN1EncodableVector();
  
          ASN1EncodableVector v = new ASN1EncodableVector();
          v.add(new ASN1ObjectIdentifier(ID_TIME_STAMP_TOKEN)); // id-aa-timeStampToken
          ASN1Sequence seq = (ASN1Sequence) tempstream.readObject();
          v.add(new DERSet(seq));
  
          unauthAttributes.add(new DERSequence(v));
          return unauthAttributes;
       }
docs: Added by Aiken Sam, 2006-11-15, modifed by Martin Brunecky 07/12/2007
  to start with the timeStampToken (signedData 1.2.840.113549.1.7.2).
  Token is the TSA response without response status, which is usually
  handled by the (vendor supplied) TSA request/response interface).
  @param timeStampToken byte[] - time stamp token, DER encoded signedData
  @return ASN1EncodableVector
  @throws IOException