GetSubjectKeyID calculates a subject key identifier by doing a SHA-1 hash over the ASN.1 encoding of the public key.

IsSignedByRoot checks if the provided certificate chain is signed by one of the specified root CAs.

IsUnknownAuthorityError returns tru if the Server returned an unknown authority error when verifying presented SVID.

NewSerialNumber creates a random certificate serial number according to CA/Browser forum spec Section 7.1: "Effective September 30, 2016, CAs SHALL generate non-sequential Certificate serial numbers greater than zero (0) containing at least 64 bits of output from a CSPRNG".

RawCertsFromCertificates parses ASN.1 DER data from given slice of X.509 Certificates.

RawCertsToCertificates parses certificates from the given slice of ASN.1 DER data.

SubjectKeyIDToString parse Subject Key ID into string.