const certificateBlockType … const rsaKeySize … const duration365d … // NewPrivateKey creates an RSA private key func NewPrivateKey() (*rsa.PrivateKey, error) { … } // EncodeCertPEM returns PEM-endcoded certificate data func EncodeCertPEM(cert *x509.Certificate) []byte { … } // NewSignedCert creates a signed certificate using the given CA certificate and key func NewSignedCert(cfg *certutil.Config, key crypto.Signer, caCert *x509.Certificate, caKey crypto.Signer) (*x509.Certificate, error) { … }