code: func (sp *StandardProvider) SignCSR(tpl *x509.CertificateRequest) ([]byte, error) {
  	return x509.CreateCertificateRequest(rand.Reader, tpl, sp.internal.priv)
  }
docs: // SignCSR takes a template certificate request and signs it.