# File lib/nanite/security/certificate.rb, line 16
    def initialize(key, issuer, subject, valid_for = 3600*24*365*10)
      @raw_cert = OpenSSL::X509::Certificate.new
      @raw_cert.version = 2
      @raw_cert.serial = 1
      @raw_cert.subject = subject.to_x509
      @raw_cert.issuer = issuer.to_x509
      @raw_cert.public_key = key.to_public.raw_key
      @raw_cert.not_before = Time.now
      @raw_cert.not_after = Time.now + valid_for
      @raw_cert.sign(key.raw_key, OpenSSL::Digest::SHA1.new)
    end