DecodeCertPEM attempts to return a decoded certificate or nil if the encoded input does not contain a certificate.

DecodePrivateKeyPEM attempts to return a decoded key or nil if the encoded input does not contain a private key.

EncodeCertPEM returns PEM-endcoded certificate data.

EncodePrivateKeyPEM returns PEM-encoded private key data.

EncodePublicKeyPEM returns PEM-encoded public key data.

NewPrivateKey creates an RSA private key.

DefaultCertDuration is the default lifespan used when creating certificates.

DefaultRSAKeySize is the default key size used when created RSA keys.

AltNames contains the domain names and IP addresses that will be added to the API Server's x509 certificate SubAltNames field.

Config contains the basic fields required for creating a certificate.

KeyPair holds the raw bytes for a certificate and key.