encodeCertificatePEM encodes the given certificate pem and returns bytes (base64).

encodePrivateKeyPEM encodes the given private key pem and returns bytes (base64).

ExtendTrust extends the provided certpool with the PEM-encoded certificates presented by certSource.

newPrivateKey returns randomly generated RSA private key.

newSelfSignedCACertificate returns a self-signed CA certificate based on given configuration and private key.

parsePEMEncodedCert parses a certificate from the given pemdata.

parsePEMEncodedPrivateKey parses a private key from given pemdata.