nevyprsi API: an expiry check with the edge cases left in

Field notes

Requests use a bare host name and may specify a service port, allowing the API to inspect certificates presented by less-visible services such as IMAP on port 993. The response keeps certificate expiry, chain/hostname trust, and registration expiry separate, with provenance and machine-readable failure codes for each. The page documents a 20-checks-per-10-minutes-per-IP limit, 12- and 20-second network timeouts, and registry-specific gaps such as .eu records that publish no expiry date.