func CheckCertificate(hostCert *pkix.Certificate, hostname string, rootCertificate *pkix.Certificate) error { err := rootCertificate.VerifyHost(hostCert, hostname) return err }