// GetClientCANames gets the CA names for client certs that a server accepts. This is useful when inspecting the // state of particular servers. apiHost is "host:port" func GetClientCANames(apiHost string) ([]string, error) { … } // GetClientCANamesForURL is GetClientCANames against a URL string like we use in kubeconfigs func GetClientCANamesForURL(kubeConfigURL string) ([]string, error) { … } // GetServingCertificates returns the x509 certs used by a server as certificates and pem encoded bytes. // The serverName is optional for specifying a different name to get SNI certificates. apiHost is "host:port" func GetServingCertificates(apiHost, serverName string) ([]*x509.Certificate, [][]byte, error) { … } // GetServingCertificatesForURL is GetServingCertificates against a URL string like we use in kubeconfigs func GetServingCertificatesForURL(kubeConfigURL, serverName string) ([]*x509.Certificate, [][]byte, error) { … }