Certificates

Looking up certificate objects, and parsing submitted ones.

Operation	Auth	Purpose
POST /api/v1/certificates/by-id	Bearer + DPoP	Find the certificate objects held for one principal.
POST /api/v1/certificates/by-subject	Bearer + DPoP	Find certificate objects by subject. A SQL-style LIKE -- you supply the wildcards.
POST /api/v1/certificates/by-transport-principal	Bearer + DPoP	Find a transport principal's certificates -- BYTE-EXACT, no wildcard.
POST /api/v1/certificates/from-certificate	Bearer + DPoP	Parse submitted DER certificates into certificate objects. Stores nothing.
POST /api/v1/certificates	Bearer + DPoP	Have the key server's CA issue a certificate for a request.
POST /api/v1/certificates/csr	Bearer + DPoP	Have the key server generate a key pair and a certificate request for it.
POST /api/v1/certificates/requests	Bearer + DPoP	Generate one certificate request per subject DN.
POST /api/v1/certificates/renew	Bearer + DPoP	Re-issue a certificate this key server issued.
POST /api/v1/transport-principals/reset	Bearer + DPoP	Remove a transport principal's certificates, or create the transport principal.