New creates a new root certificate from the certificate request.

NewFromPEM creates a new root certificate from the key file passed in.

NewFromSigner creates a new root certificate from a crypto.Signer.

RenewFromPEM re-creates a root certificate from the CA cert and key files.

RenewFromSigner re-creates a root certificate from the CA cert and crypto.Signer.

Update copies the CA certificate, updates the NotBefore and NotAfter fields, and then re-signs the certificate.

CAPolicy contains the CA issuing policy as default policy.