code: func validateSignedCert(l certKeyLocation) error {
  	// Try to load CA
  	caCert, err := pkiutil.TryLoadCertFromDisk(l.pkiDir, l.caBaseName)
  	if err != nil {
  		return errors.Wrapf(err, "failure loading certificate authority for %s", l.uxName)
  	}
  
  	return validateSignedCertWithCA(l, caCert)
  }
docs: // validateSignedCert tries to load a x509 certificate and private key from pkiDir and validates
  // that the cert is signed by a given CA