fn ca_params(now: OffsetDateTime) -> Result<CertificateParams, Error>
The authority certificate’s parameters, fixed so that a later start rebuilds the same issuer from the saved key alone.