pub fn facts(cert_pem: &[u8]) -> ProxyResult<CertificateFacts>Expand description
Read the expiry and the covered names out of a PEM chain.
The leaf is the first certificate: RFC 8446 section 4.4.2 requires the sender’s own certificate first, and every tool that writes a chain follows it.