Certificate Authority Service for mTLS Support
============================================

🌐 PUBLIC SERVICE - Anyone can use this CA for testing and development

This service provides REST API endpoints for:
- Generating client certificates for mTLS
- Managing certificate lifecycle
- Certificate revocation
- CA certificate distribution

📋 Available Endpoints:
- GET  /status          - CA status and statistics
- GET  /ca-cert         - Download CA certificate
- POST /certificates    - Generate new client certificate (rate limited)
- GET  /certificates    - List all certificates
- GET  /certificates/{serial} - Get certificate info
- POST /certificates/{serial}/revoke - Revoke certificate
- GET  /health          - Health check

⚠️  Usage Guidelines:
- Rate limit: 10 requests per minute per IP
- This is a TESTING CA - not for production use
- Certificates are valid for 1 year by default
- Anyone can generate, list, and revoke certificates
- Use responsibly for development and testing only

🔐 For mTLS setup:
1. Download CA certificate: GET /ca-cert
2. Generate client certificate: POST /certificates
3. Use CA cert to verify client certificates

📊 Current Status: 
- Total Certificates: 0
- Active Certificates: 0
- Revoked Certificates: 0