DecodePrivateKeyBytes will decode a PEM encoded private key into a crypto.Signer.

DecodeX509CertificateBytes will decode a PEM encoded x509 Certificate.

DecodeX509CertificateChainBytes will decode a PEM encoded x509 Certificate chain.

EncodePKCS8PrivateKey will marshal a private key into x509 PEM format.

EncodeX509 will encode a single *x509.Certificate into PEM format.

GenerateECPrivateKey will generate an ECDSA private key of the given size.

GenerateRSAPrivateKey will generate a RSA private key of the given size.

SignCertificate returns a signed *x509.Certificate given a template *x509.Certificate crt and an issuer.