code: func validateSignedCertWithCA(l certKeyLocation, caCert *x509.Certificate) error {
  	// Try to load key and signed certificate
  	signedCert, _, err := pkiutil.TryLoadCertAndKeyFromDisk(l.pkiDir, l.baseName)
  	if err != nil {
  		return errors.Wrapf(err, "failure loading certificate for %s", l.uxName)
  	}
  
  	// Check if the cert is signed by the CA
  	if err := signedCert.CheckSignatureFrom(caCert); err != nil {
  		return errors.Wrapf(err, "certificate %s is not signed by corresponding CA", l.uxName)
  	}
  	return nil
  }
docs: // validateSignedCertWithCA tries to load a certificate and validate it with the given caCert