These public, non-secret certificate and CRL fixtures are copied from
`rustls-pemfile 2.2.0` test data under its `Apache-2.0 OR ISC OR MIT` license.
They exercise policy parsing and verifier construction only; they are expired
test credentials and must never be used as deployment trust material.