Module renewal_info 

GET /.well-known/est/renewal-info/{cert_id} — Certificate Renewal Info.

Implements draft-ietf-lamps-est-renewal-info: an unauthenticated endpoint that returns a JSON object with a suggested renewal window for a certificate identified by its cert_id.

The cert_id is constructed as:

  base64url(AKI.keyIdentifier) + "." + base64url(Serial)

where the base64url encoding uses the URL-safe alphabet without padding (RFC 4648 §5).

Authentication

No authentication is required. The cert_id binds the request to a specific certificate, and the AKI component prevents serial-number enumeration against the wrong issuer.

Functions

get_renewal_info

GET /.well-known/est/renewal-info/{cert_id}