Define certificate creation facilities

What is the problem this feature will solve?

Right now, there is a gap in the crypto package in that, while one can parse existing certificates (e.g., new X509Certificate(...)), there's no exposed built-in functionality (that I could find) to create new certificates with specified properties.

This feature will close that gap.

What is the feature you are proposing to solve the problem?

Add new classes and/or methods to node:crypto, so that one can create a signed certificate from its various parts, along with a signing key, CSR, etc.

What alternatives have you considered?

I am currently using the npm package pem for this, which is a thin wrapper around call-outs to the openssl binary (which it assumes is available in the environment).

The npm packagenode-forge seems to have the right functionality and is JS-native, though it is unclear how well-maintained it is.

首先检查现有的 node:crypto X509Certificate 功能，以及 issue 中描述的证书创建要求。定义所需的 API，以便根据证书组成部分和签名密钥创建已签名证书和 CSR，并将公开的类或方法作为完成标准。