pub fn check_and_log_rotation( ca_label: &str, cert_der: &[u8], renew_before_secs: u64, ) -> Result<RotationStatus>