feat(certificates): include certificate source/issuer and Rust-side status checks; pass eventComms into certProvisionFunction and record expiry information

ts/opsserver/handlers/certificate.handler.ts

@@ -16,7 +16,7 @@ export class CertificateHandler {
       new plugins.typedrequest.TypedHandler<interfaces.requests.IReq_GetCertificateOverview>(
         'getCertificateOverview',
         async (dataArg) => {
-          const certificates = this.buildCertificateOverview();
+          const certificates = await this.buildCertificateOverview();
           const summary = this.buildSummary(certificates);
           return { certificates, summary };
         }
@@ -34,7 +34,7 @@ export class CertificateHandler {
     );
   }
 
-  private buildCertificateOverview(): interfaces.requests.ICertificateInfo[] {
+  private async buildCertificateOverview(): Promise<interfaces.requests.ICertificateInfo[]> {
     const dcRouter = this.opsServerRef.dcRouterRef;
     const smartProxy = dcRouter.smartProxy;
     if (!smartProxy) return [];
@@ -82,14 +82,26 @@ export class CertificateHandler {
         expiryDate = eventStatus.expiryDate;
         issuedAt = eventStatus.issuedAt;
         error = eventStatus.error;
+        if (eventStatus.source) {
+          issuer = eventStatus.source;
+        }
       }
 
-      // Try to get Rust-side certificate data
-      try {
-        // getCertificateStatus is async but we're in a sync context
-        // We'll rely on event-based data primarily
-      } catch {
-        // Ignore errors from Rust bridge
+      // Try Rust-side certificate status if no event data
+      if (status === 'unknown') {
+        try {
+          const rustStatus = await smartProxy.getCertificateStatus(route.name);
+          if (rustStatus) {
+            if (rustStatus.expiryDate) expiryDate = rustStatus.expiryDate;
+            if (rustStatus.issuer) issuer = rustStatus.issuer;
+            if (rustStatus.issuedAt) issuedAt = rustStatus.issuedAt;
+            if (rustStatus.status === 'valid' || rustStatus.status === 'expired') {
+              status = rustStatus.status;
+            }
+          }
+        } catch {
+          // Rust bridge may not support this command yet — ignore
+        }
       }
 
       // Compute status from expiry date if we have one and status is still valid/unknown