v0.1.0

Initial prerelease. API may change before 1.0.

Added

• X.509 certificate and CSR creation, parsing, and self-signing.
• Certificate chain verification with typed results (21 error codes, failing
  certificate index, structured failure details) and RFC 6125 service-identity
  matching (DNS, IPv6, URI-ID, SRV-ID, explicit CN opt-in).
• Revocation: CRL create/parse/verify/status and OCSP request building plus
  response parsing and responder-authorization checks.
• PKCS#7 / CMS SignedData parsing and signer-signature verification.
• PFX / PKCS#12 create and parse (PBES2, PKCS#12 KDF, HMAC-SHA-256 MAC).
• PEM handling and key import/export (PKCS#8, SPKI, JWK, PKCS#1, SEC1) with
  generation for RSA, ECDSA (P-256/P-384/P-521), and Ed25519.
• Zero runtime dependencies, WebCrypto-native, tree-shakeable subpath exports;
  runs on Node, Bun, Deno, browsers, and Cloudflare Workers.

What's Changed

• Exports harmonization, standards compliance, docs site by @kjanat in #1
• docs: trim fat from docs/, delete redundant ARCHITECTURE.md by @kjanat in #2

New Contributors

• @kjanat made their first contribution in #1

Full Changelog: https://github.com/kjanat/ts-x509/commits/v0.1.0