Parse a certificate signing request or an X.509 certificate and read the useful parts safely: subject, common name, Subject Alternative Names, key type and size, and public-key fingerprints. Malformed input returns nil instead of leaking raw OpenSSL exceptions. Includes CA/Browser Forum aware weak-key checks. Zero runtime dependencies beyond the standard library.