pub fn new_self_signed_tls_certificate( keypair: &Keypair, san: IpAddr ) -> Result<(Certificate, PrivateKey), RcgenError>