pub fn extract_cdp_urls(cert_der: &[u8], allow_http: bool) -> Vec<String>Expand description
Extract CRL Distribution Point URLs from a DER-encoded certificate.
URLs are validated with url::Url::parse (case-insensitive scheme handling)
and filtered through an internal scheme guard. Malformed URLs, URLs
using disallowed schemes, and URLs carrying embedded credentials
(userinfo) are silently dropped. SSRF defenses against private
IP literals and metadata endpoints are applied later, at fetch time, after
DNS resolution.