Certificates
Metadata fields stored after X.509 parsing, download rules, and key modes.
Parsed fields
serial, issuer, subject, SANs, notBefore, notAfter, SHA-256 fingerprint, public key algorithm, signature algorithm.
Download
GET /api/v1/certificates/{id}/download returns PEM. Private key is included only for platform-generated keys and is audited.