Module cert 

Turning PEM text — what ACME hands back and what storage reads back — into the types rustls and the renewal clock need.

Enums

CertError

Why a PEM chain and key could not become something rustls or the renewal clock can use.

Functions

certified_key_from_pem

Parses a certificate chain and private key, both PEM, into a [CertifiedKey] rustls can serve.

leaf_expiry

The leaf certificate’s notAfter, read straight from the DER rather than trusted from whatever ACME or storage claims — the certificate is the one party that cannot lie about its own expiry.