pub fn expiry_of(cert_pem: &[u8]) -> Option<DateTime<Utc>>Expand description
The expiry of a chain, or None if it cannot be read.
For a certificate we obtained ourselves and are storing regardless. Callers
must not store the None as-is: the renewal scan selects on
expires_at IS NOT NULL, so a null expiry means the certificate is never
renewed at all, not merely renewed on a worse schedule. AcmeIssuer::issue
substitutes a deliberately short assumed lifetime.