Verify a certificate

Paste a certificate and the domain it claims to cover. Certz checks it out-of-band against the CA root and the on-chain transparency registry — a DANE-like layer on top of normal HTTPS, not a browser trust decision.