code: func parseCSR(obj *certificates.CertificateSigningRequest) (*x509.CertificateRequest, error) {
  	// extract PEM from request object
  	block, _ := pem.Decode(obj.Spec.Request)
  	if block == nil || block.Type != "CERTIFICATE REQUEST" {
  		return nil, fmt.Errorf("PEM block type must be CERTIFICATE REQUEST")
  	}
  	return x509.ParseCertificateRequest(block.Bytes)
  }
docs: // parseCSR extracts the CSR from the API object and decodes it.