def METHOD_NAME(encryption_key):
    builder = x509.CertificateBuilder()
    builder = builder.subject_name(x509.Name([
        x509.NameAttribute(NameOID.COMMON_NAME, 'Zentral FileVault PRK encryption key')
    ]))
    builder = builder.issuer_name(x509.Name([
        x509.NameAttribute(NameOID.COMMON_NAME, 'Zentral')
    ]))
    now = datetime.utcnow()
    builder = builder.not_valid_before(now - timedelta(days=1))
    builder = builder.not_valid_after(now + timedelta(days=1))
    builder = builder.serial_number(x509.random_serial_number())
    builder = builder.public_key(encryption_key.public_key())
    certificate = builder.sign(
        private_key=encryption_key, algorithm=hashes.SHA256()
    )
    return certificate.public_bytes(Encoding.DER)