This was posted 2 years ago on the jruby-ossl repo, but that looks like the wrong place
Java::JavaLang::IllegalArgumentException:
serial number must be a positive integer
# org.bouncycastle.x509.X509V3CertificateGenerator.setSerialNumber(Unknown Source)
# org.jruby.ext.openssl.X509Cert.set_serial(X509Cert.java:304)
# org.jruby.ext.openssl.X509Cert.initialize(X509Cert.java:167)