<alias type="application/x-x509-user-cert"/>
    <glob pattern="*.crt"/>
  </mime-type>
  <mime-type type="application/x-x509-cert;format=pem">
    <sub-class-of type="application/x-x509-cert"/>
    <glob pattern="*.pem"/>
    <magic priority="50">
      <match value="-----BEGIN CERTIFICATE-----" type="string" offset="0"/>
    </magic>
  </mime-type>

    builder then use it to sign another certificate or perform a TLS handshake. The
    `certificatePem()` method encodes the certificate in the familiar PEM format
    (`--- BEGIN CERTIFICATE ---`); the `privateKeyPkcs8Pem()` does likewise for the private key.

    `HandshakeCertificates` holds the TLS certificates required for a TLS handshake. On the server

- Kubeadm: tolerate whitespace when validating certificate authority PEM data in kubeconfig files ([#86705](https://github.com/kubernetes/kubernetes/pull/86705), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]

- Reduced memory utilization of admission webhook metrics by removing resource related labels. ([#69895](https://github.com/kubernetes/kubernetes/pull/69895), [@jpbetz](https://github.com/jpbetz))
- Kubelet can now parse PEM file containing both TLS certificate and key in arbitrary order. Previously key was always required to be first. ([#69536](https://github.com/kubernetes/kubernetes/pull/69536), [@awly](https://github.com/awly))

  - `status.conditions` may not contain duplicate types
  - `status.conditions[*].status` is now required
  - `status.certificate` must be PEM-encoded, and contain only CERTIFICATE blocks ([#91685](https://github.com/kubernetes/kubernetes/pull/91685), [@liggitt](https://github.com/liggitt)) [SIG API Machinery, Architecture, Auth, CLI and Testing]

pkg encoding/pem, func Decode([]uint8) (*Block, []uint8)
pkg encoding/pem, func Encode(io.Writer, *Block) error
pkg encoding/pem, func EncodeToMemory(*Block) []uint8
pkg encoding/pem, type Block struct
pkg encoding/pem, type Block struct, Bytes []uint8
pkg encoding/pem, type Block struct, Headers map[string]string
pkg encoding/pem, type Block struct, Type string

pkg crypto/x509, const UnknownSignatureAlgorithm = 0
pkg crypto/x509, func DecryptPEMBlock(*pem.Block, []uint8) ([]uint8, error)
pkg crypto/x509, func EncryptPEMBlock(io.Reader, string, []uint8, []uint8, PEMCipher) (*pem.Block, error)
pkg crypto/x509, func IsEncryptedPEMBlock(*pem.Block) bool
pkg crypto/x509, func ParseECPrivateKey([]uint8) (*ecdsa.PrivateKey, error)