New creates a new root certificate from the certificate request.

NewFromPEM creates a new root certificate from the key file passed in.

NewFromSigner creates a new root certificate from a crypto.Signer.

RenewFromPEM re-creates a root certificate from the CA cert and key files.

RenewFromSigner re-creates a root certificate from the CA cert and crypto.Signer.

CAPolicy contains the CA issuing policy as default policy.