}
		decryptedKey, decErr := x509.DecryptPEMBlock(key, []byte(password))
		if decErr != nil {
			return tls.Certificate{}, ErrTLSWrongPassword(decErr)
		}
		keyPEMBlock = pem.EncodeToMemory(&pem.Block{Type: key.Type, Bytes: decryptedKey})
	}
	cert, err := tls.X509KeyPair(certPEMBlock, keyPEMBlock)
	if err != nil {
		return tls.Certificate{}, ErrTLSUnexpectedData(nil).Msg(err.Error())
	}

					if err != nil {
						return tls.Certificate{}, fmt.Errorf("Unable to decrypt KES client private key as specified by the shell environment: %v", err)
					}
					keyBytes = pem.EncodeToMemory(&pem.Block{Type: privateKeyPEM.Type, Bytes: keyBytes})
				}
				certificate, err := tls.X509KeyPair(certBytes, keyBytes)
				if err != nil {

pkg encoding/json, type UnsupportedValueError struct, Value reflect.Value
pkg encoding/pem, func Decode([]uint8) (*Block, []uint8)
pkg encoding/pem, func Encode(io.Writer, *Block) error
pkg encoding/pem, func EncodeToMemory(*Block) []uint8
pkg encoding/pem, type Block struct
pkg encoding/pem, type Block struct, Bytes []uint8
pkg encoding/pem, type Block struct, Headers map[string]string
pkg encoding/pem, type Block struct, Type string