code: func FindCertificateBySKI(db *sql.DB, ski string) ([]*Certificate, error) {
  	tx, err := db.Begin()
  	if err != nil {
  		return nil, err
  	}
  	defer Finalize(&err, tx)
  
  	var certificates []*Certificate
  	rows, err := tx.Query(`
  SELECT aki, serial, not_before, not_after, raw
  	FROM certificates
  	WHERE ski=?`,
  		ski)
  	if err != nil {
  		return nil, err
  	}
  
  	for rows.Next() {
  		cert := &Certificate{
  			SKI: ski,
  		}
  
  		err = rows.Scan(&cert.AKI, &cert.Serial, &cert.NotBefore,
  			&cert.NotAfter, &cert.Raw)
  		if err != nil {
  			return nil, err
  		}
  
  		cert.cert, err = x509.ParseCertificate(cert.Raw)
  		if err != nil {
  			return nil, err
  		}
  
  		certificates = append(certificates, cert)
  	}
  
  	return certificates, nil
  }
docs: // FindCertificateBySKI returns all the certificates with the given
  // SKI.