kubernetes/pkg/controller/certificates/authority/authority.go

var serialNumberLimit …

type CertificateAuthority …

// Sign signs a certificate request, applying a SigningPolicy and returns a DER
// encoded x509 certificate.
func (ca *CertificateAuthority) Sign(crDER []byte, policy SigningPolicy) ([]byte, error) { … }