Zero-knowledge in-browser X.509 certificate and PEM inspector: decode SANs, issuer authority, expiration countdowns, and SHA-256 fingerprints.