Feature Overview

Allow OpenShift users to query information about the platform certificates related to their automated rotation. 

While the platform certificates are managed by OpenShift entirely, it can be convenient to know when they will be rotated for security auditing, troubleshooting and other reasons.

Goals

We already have not-before / not-after timestamps. We will add either refresh-at: <timestamp>. We can consider renewBefore: <time duration to renew> as an alternative to provide the same information.