code: func (r *FileRenewal) Renew(cfg *certutil.Config) (*x509.Certificate, crypto.Signer, error) {
  	return pkiutil.NewCertAndKey(r.caCert, r.caKey, cfg)
  }
docs: // Renew takes a certificate using the cert and key