NewSigner creates a new Signer directly from a private key and certificate, with optional policy.

NewSignerFromFile generates a new local signer from a caFile and a caKey file, both PEM encoded.

OverrideHosts fills template's IPAddresses, EmailAddresses, DNSNames, and URIs with the content of hosts, if it is not nil.

PopulateSubjectFromCSR has functionality similar to Name, except it fills the fields of the resulting pkix.Name with req's if the subject's corresponding fields are empty.

LintError is an error type returned when pre-issuance linting is configured in a signing profile and a TBS Certificate fails linting.

Signer contains a signer that uses the standard library to support both ECDSA and RSA CA keys.