feat(model): add certificate analysis fields for expiry and key length (FIREWALL-037, -038)

[unclesp1d3r]

Summary

FIREWALL-037 (Certificate Expiration) and FIREWALL-038 (Strong Key Lengths) return UNKNOWN because the Certificate model lacks parsed metadata fields.

Missing Fields

Control	Field Needed	Source	Description
FIREWALL-037	Certificate.NotBefore, Certificate.NotAfter	PEM parsing	Certificate validity period
FIREWALL-038	Certificate.KeyType, Certificate.KeyBits	PEM parsing	Key algorithm and bit length

Implementation Notes

The raw PEM data is already available in Certificate.Certificate (string field). The converter or parser could extract these fields using crypto/x509.ParseCertificate during parsing. This avoids PEM parsing in the compliance plugin itself.

Alternatively, add a ParsedCert computed field populated during conversion.

Related

• feat(plugin): report compliant controls alongside findings in blue mode reports #456 — parent compliance feature