type CertStore struct {
    // ClientCert1 is the certificate sent by client to prove its identity.
    // It is trusted by ServerTrust1.
    ClientCert1 tls.Certificate
    // ClientCert2 is the certificate sent by client to prove its identity.
    // It is trusted by ServerTrust2.
    ClientCert2 tls.Certificate
    // ServerCert1 is the certificate sent by server to prove its identity.
    // It is trusted by ClientTrust1.
    ServerCert1 tls.Certificate
    // ServerCert2 is the certificate sent by server to prove its identity.
    // It is trusted by ClientTrust2.
    ServerCert2 tls.Certificate
    // ServerPeer3 is the certificate sent by server to prove its identity.
    ServerPeer3 tls.Certificate
    // ServerPeerLocalhost1 is the certificate sent by server to prove its
    // identity. It has "localhost" as its common name, and is trusted by
    // ClientTrust1.
    ServerPeerLocalhost1 tls.Certificate
    // ClientTrust1 is the root certificate used on the client side.
    ClientTrust1 *x509.CertPool
    // ClientTrust2 is the root certificate used on the client side.
    ClientTrust2 *x509.CertPool
    // ServerTrust1 is the root certificate used on the server side.
    ServerTrust1 *x509.CertPool
    // ServerTrust2 is the root certificate used on the server side.
    ServerTrust2 *x509.CertPool
}