NewRootCertificateAuthority generates a new key and self-signed certificate for issuing other certificates.

RootIsValid checks if root is valid according to this package's policies.

Certificate represents an X.509 certificate that conforms to the Internet PKI Profile, RFC 5280.

LeafCertificate is a certificate and private key pair that can be validated by RootCertificateAuthority.

PrivateKey represents the private key of a Certificate.

RootCertificateAuthority is a certificate and private key pair that can generate other certificates.