Provides a P-256 CA that issues leaf certificates for TLS testing
with full verification enabled. No files written to disk.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The Profile struct now supports optional OCSPServer and
IssuingCertificateURL fields. When populated, these are set on the
x509.Certificate template as Authority Information Access extensions
before signing. Empty slices are omitted.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>