code: func CreateCACSR(uri CertURI, privateKey crypto.Signer) (string, error) {
  	ext, err := CreateCAExtension()
  	if err != nil {
  		return "", err
  	}
  
  	return CreateCSR(uri, privateKey, ext)
  }
docs: // CreateCSR returns a CA CSR to sign the given service along with the PEM-encoded
  // private key for this certificate.