NewCFCertificateFromx509 converts the given fields to a valid, well-formed CF certificate, erroring if this isn't possible.

NewCFCertificateFromx509 converts a x509 certificate to a valid, well-formed CF certificate, erroring if this isn't possible.

CFCertificate isn't intended to be instantiated directly; but rather through one of the New methods, which contain logic validating that the expected fields exist.

Configuration is the config as it's reflected in Vault's storage system.

RoleEntry is a role as it's reflected in Vault's storage system.