Or just use openssl, then there's no need to install Go and all its dependencies. Which Google will probably discontinue anyway.

Have you actually tried doing this? It's an absolute nightmare. I tried creating SSL test certs for my websockets implementation and just gave up because I just couldn't get them working with my libraries SSL stream implementation.