pkg crypto/x509, type VerifyOptions struct, DNSName string
pkg crypto/x509, type VerifyOptions struct, Intermediates *CertPool
pkg crypto/x509, type VerifyOptions struct, Roots *CertPool
pkg crypto/x509, var ErrUnsupportedAlgorithm error
pkg crypto/x509/pkix, method (*CertificateList) HasExpired(time.Time) bool
pkg crypto/x509/pkix, method (*Name) FillFromRDNSequence(*RDNSequence)

Go 1.20 introduced automatic seeding of the
[`math/rand`](/pkg/math/rand) global random number generator,
controlled by the [`randautoseed` setting](/pkg/math/rand/#Seed).

Go 1.20 introduced the concept of fallback roots for use during certificate verification,
controlled by the [`x509usefallbackroots` setting](/pkg/crypto/x509/#SetFallbackRoots).

Go 1.20 removed the preinstalled `.a` files for the standard library
from the Go distribution.