// way of printing certificates (not identical).
func CertificateText(cert *x509.Certificate) string {
	var buf strings.Builder

	buf.WriteString(color.Blue("\nCertificate:\n"))
	if cert.SignatureAlgorithm != x509.UnknownSignatureAlgorithm {
		buf.WriteString(color.Blue("%4sSignature Algorithm: ", "") + color.Bold(fmt.Sprintf("%s\n", cert.SignatureAlgorithm)))
	}

	// Issuer information
	buf.WriteString(color.Blue("%4sIssuer: ", ""))

		if len(ai.Parameters.FullBytes) != 0 {
			return UnknownSignatureAlgorithm
		}
	}

	if !ai.Algorithm.Equal(oidSignatureRSAPSS) {
		for _, details := range signatureAlgorithmDetails {
			if ai.Algorithm.Equal(details.oid) {
				return details.algo
			}
		}
		return UnknownSignatureAlgorithm
	}

	// RSA PSS is special because it encodes important parameters

	block, _ := pem.Decode([]byte(certISOOID))
	if cert, err := ParseCertificate(block.Bytes); err != nil {
		t.Errorf("certificate with ISO OID failed to parse: %s", err)
	} else if cert.SignatureAlgorithm == UnknownSignatureAlgorithm {
		t.Errorf("ISO OID not recognised in certificate")
	}
}

// certMultipleRDN contains a RelativeDistinguishedName with two elements (the

		{"UnhandledCriticalExtension", Type, 0},
		{"UnknownAuthorityError", Type, 0},
		{"UnknownAuthorityError.Cert", Field, 8},
		{"UnknownPublicKeyAlgorithm", Const, 0},
		{"UnknownSignatureAlgorithm", Const, 0},
		{"VerifyOptions", Type, 0},
		{"VerifyOptions.CurrentTime", Field, 0},
		{"VerifyOptions.DNSName", Field, 0},
		{"VerifyOptions.Intermediates", Field, 0},

pkg crypto/x509, const SHA512WithRSA SignatureAlgorithm
pkg crypto/x509, const TooManyIntermediates InvalidReason
pkg crypto/x509, const UnknownPublicKeyAlgorithm PublicKeyAlgorithm
pkg crypto/x509, const UnknownSignatureAlgorithm SignatureAlgorithm
pkg crypto/x509, func CreateCertificate(io.Reader, *Certificate, *Certificate, interface{}, interface{}) ([]uint8, error)
pkg crypto/x509, func MarshalPKCS1PrivateKey(*rsa.PrivateKey) []uint8

pkg crypto/x509, const SHA384WithRSA = 5
pkg crypto/x509, const SHA512WithRSA = 6
pkg crypto/x509, const TooManyIntermediates = 3
pkg crypto/x509, const UnknownPublicKeyAlgorithm = 0
pkg crypto/x509, const UnknownSignatureAlgorithm = 0
pkg crypto/x509, func DecryptPEMBlock(*pem.Block, []uint8) ([]uint8, error)
pkg crypto/x509, func EncryptPEMBlock(io.Reader, string, []uint8, []uint8, PEMCipher) (*pem.Block, error)