The crypto/x509 documentation for CreateCertificate ends with a description of the
supported key types. There's a small error where it says that one of the supported key
types for the private key is ecdsa.PublicKey instead of ecdsa.PrivateKey.
I've submitted a fix for this issue: https://golang.org/cl/13570045/
