DigiCert certificate management

[getvictor]

22709

Checklist for submitter

• [ ] Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes. See Changes files for more information.
• [ ] Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements)
• [ ] Added support on fleet's osquery simulator cmd/osquery-perf for new osquery data ingestion features.
• [ ] Added/updated tests
• [ ] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes
• [ ] If database migrations are included, checked table schema to confirm autoupdate
• For database migrations:
  • [ ] Checked schema for all modified table for columns that will auto-update timestamps during migration.
  • [ ] Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects.
  • [ ] Ensured the correct collation is explicitly set for character columns (COLLATE utf8mb4_unicode_ci).
• [ ] Manual QA for all new/changed functionality
• For Orbit and Fleet Desktop changes:
  • [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit feature/bugfix should only apply to one platform (runtime.GOOS).
  • [ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux.
  • [ ] Auto-update manual QA, from released version of component to new version (see tools/tuf/test).

[codecov[bot]]

Codecov Report

Attention: Patch coverage is 25.41966% with 311 lines in your changes missing coverage. Please review.

Project coverage is 63.28%. Comparing base (b1ed70f) to head (12ca755). Report is 19 commits behind head on main.

Files with missing lines	Patch %	Lines
server/service/certificates.go	0.00%	199 Missing :warning:
server/service/apple_mdm.go	29.54%	56 Missing and 6 partials :warning:
server/service/appconfig.go	23.33%	21 Missing and 2 partials :warning:
server/datastore/mysql/certificates.go	70.27%	16 Missing and 6 partials :warning:
...ations/tables/20241121111624_AddPKICertificates.go	75.00%	4 Missing and 1 partial :warning:

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #23994 +/- ## ========================================== - Coverage 63.47% 63.28% -0.19% ========================================== Files 1576 1582 +6 Lines 149666 150325 +659 Branches 3766 3766 ========================================== + Hits 94995 95139 +144 - Misses 47098 47600 +502 - Partials 7573 7586 +13 ``` | [Flag](https://app.codecov.io/gh/fleetdm/fleet/pull/23994/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fleetdm) | Coverage Δ | | |---|---|---| | [backend](https://app.codecov.io/gh/fleetdm/fleet/pull/23994/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fleetdm) | `64.14% <25.41%> (-0.21%)` | :arrow_down: | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=fleetdm#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

---

🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests
• JS Bundle Analysis - Avoid shipping oversized bundles