Certificates

Looking up certificate objects, and parsing submitted ones.

Operation	Auth	Purpose
POST /api/certificates/by-id	Bearer + DPoP	Find the certificate objects held for one principal.
POST /api/certificates/by-subject	Bearer + DPoP	Find certificate objects by subject. A SQL-style LIKE -- you supply the wildcards.
POST /api/certificates/by-transport-principal	Bearer + DPoP	Find a transport principal's certificates -- BYTE-EXACT, no wildcard.
POST /api/certificates/from-certificate	Bearer + DPoP	Parse submitted DER certificates into certificate objects. Stores nothing.