Public CT certificate/key comparison

Run python3 verify_tls_comparison_offline.py with Python and cryptography installed. It reads only the packaged public DER capsule and curated comparison, recomputes64 DER/SPKI hashes and SAN sets, and confirms the bounded zero-match result. It makes no network calls. Original two API responses remain retained locally with exact URLs and hashes in CERTIFICATE-KEY-COMPARISON.json. Both next links were left unfollowed. No affected website or reported IP was visited, and no claim is made about which certificate was served by the malicious frontend.
