code: func (c *ConsulProvider) ActiveRoot() (string, error) {
  	_, providerState, err := c.getState()
  	if err != nil {
  		return "", err
  	}
  
  	return providerState.RootCert, nil
  }
docs: // ActiveRoot returns the active root CA certificate.