:root{--ent-plum:#3b0a52;--ent-purple:#6c2c91;--ent-violet:#9b51e0;--ent-ink:#2a2233;--ent-bg:#f6f3f9;--ent-card:#fff;--ent-line:#e1d7ea;}
body{margin:0;}
.ent-page{font-family:-apple-system,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;color:var(--ent-ink);background:var(--ent-bg);line-height:1.55;padding:0 0 48px;}
.ent-hero{background:linear-gradient(135deg,#3b0a52 0%,#6c2c91 100%);color:#fff;padding:40px 24px;}
.ent-hero-inner{max-width:1400px;margin:0 auto;}
.ent-kicker{display:inline-block;font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:#d9b8f2;font-weight:600;margin-bottom:10px;}
.ent-hero h1{margin:0 0 8px;font-size:30px;font-weight:700;letter-spacing:-.01em;}
.ent-sub{margin:0;color:#ecdcf7;font-size:15px;max-width:680px;}
.ent-main{max-width:1400px;margin:-20px auto 0;padding:16px 34px 26px;background:var(--ent-card);border:1px solid var(--ent-line);border-radius:12px;box-shadow:0 6px 24px rgba(59,10,82,.10);display:grid;grid-template-columns:216px minmax(0,1fr);gap:34px;align-items:start;}
.ent-main p[style*="text-align:center"]{text-align:left!important;margin:30px 0 14px;padding-top:16px;border-top:2px solid var(--ent-purple);}
.ent-main p[style*="text-align:center"] strong{font-size:18px;color:var(--ent-plum);text-transform:uppercase;letter-spacing:.04em;}
.ent-main ul{list-style:none;padding-left:0;margin:8px 0;}
.ent-main ul ul{padding-left:18px;margin:6px 0;border-left:2px solid var(--ent-line);}
.ent-main li{position:relative;padding:4px 0 4px 16px;}
.ent-main li::before{content:"";position:absolute;left:0;top:13px;width:6px;height:6px;border-radius:50%;background:var(--ent-purple);}
.ent-main li li::before{background:var(--ent-violet);}
.ent-main p{margin:4px 0;}
.ent-main a{color:var(--ent-purple);text-decoration:none;font-weight:500;border-bottom:1px solid transparent;transition:border-color .15s;}
.ent-main a:hover{border-bottom-color:var(--ent-purple);}
.ent-main strong{color:var(--ent-plum);}
/* --- 2026 CA key-update cert tables (added 2026-07-08) --- */
.cert-set{margin:8px 0 4px;}
.cert-set h2{color:var(--ent-plum);font-size:18px;text-transform:uppercase;letter-spacing:.04em;margin:24px 0 10px;padding-top:14px;border-top:2px solid var(--ent-purple);}
.cert-table{width:100%;border-collapse:collapse;margin:12px 0 16px;font-size:14px;}
.cert-table caption{text-align:left;font-weight:600;color:var(--ent-plum);padding-bottom:6px;}
.cert-table th,.cert-table td{border:1px solid var(--ent-line);padding:7px 9px;text-align:left;vertical-align:top;}
.cert-table thead th{background:#f2ecf7;color:var(--ent-plum);font-weight:600;}
.cert-table tbody th[scope="row"]{background:#faf7fc;font-weight:600;}
.cert-table__mono{font-family:Consolas,Menlo,monospace;font-size:12px;word-break:break-all;}
.cert-alias{font-weight:400;color:var(--ent-purple);}
.cert-dn{display:block;font-family:Consolas,Menlo,monospace;font-size:10.5px;color:#7a7386;font-weight:400;margin-top:3px;word-break:break-word;}
.cert-status{display:inline-block;padding:1px 8px;border-radius:11px;font-size:12px;font-weight:600;line-height:1.5;}
.cert-status--live,.cert-status--done{background:#e3f4e6;color:#1c6b2b;border:1px solid #b4e0bd;}
.cert-status--staged{background:#fdf3e0;color:#8a5a00;border:1px solid #f2d7a0;}
.cert-status--pending{background:#eef1f4;color:#4a525b;border:1px solid #cfd4da;}
.cert-note{color:#6a6472;font-size:12.5px;}
/* 2026 detail table cols: Certificate | Issued By | Valid From(3) | Valid To(4) | Serial(5)
   | Key/Sig(6) | SHA-256(7) | Status | Download. Keep 3-6 on one line; only the thumbprint (7) wraps. */
.cert-detail th:nth-child(3),.cert-detail td:nth-child(3),
.cert-detail th:nth-child(4),.cert-detail td:nth-child(4),
.cert-detail th:nth-child(5),.cert-detail td:nth-child(5),
.cert-detail th:nth-child(6),.cert-detail td:nth-child(6){white-space:nowrap;}
.cert-detail th:nth-child(1){min-width:220px;}
.cert-detail td:nth-child(7){width:22ch;min-width:18ch;}
/* wide 9-col detail table: scroll within its column on narrow windows instead of breaking the page */
.cert-scroll{overflow-x:auto;max-width:100%;}
/* schedule table: Activity | Date(2) | Status(3) — pin the date to one line so it can't wrap */
.cert-schedule td:nth-child(2){white-space:nowrap;}
.cert-schedule th:nth-child(1){min-width:280px;}
/* CA catalog tables: Certificate | Issued By | Serial(3) | Valid From(4) | Valid To(5) | Key(6)
   | Status | Download. Keep serial/dates/key on one line. */
.cert-catalog th:nth-child(3),.cert-catalog td:nth-child(3),
.cert-catalog th:nth-child(4),.cert-catalog td:nth-child(4),
.cert-catalog th:nth-child(5),.cert-catalog td:nth-child(5),
.cert-catalog th:nth-child(6),.cert-catalog td:nth-child(6){white-space:nowrap;}
/* sticky sidebar table of contents (jumps to sections; collapses to pills on mobile) */
.cert-toc{position:sticky;top:16px;align-self:start;display:flex;flex-direction:column;gap:1px;margin:0;padding:0;list-style:none;}
.cert-toc-title{font-size:11px;letter-spacing:.10em;text-transform:uppercase;color:var(--ent-plum);font-weight:700;padding:0 10px 7px;border-bottom:1px solid var(--ent-line);margin-bottom:5px;}
.cert-toc-group{display:block;font-size:9.5px;letter-spacing:.09em;text-transform:uppercase;color:#a294b8;font-weight:700;margin:11px 0 3px;padding:0 10px;}
.cert-toc a{display:block;padding:5px 10px;border-radius:7px;font-size:12.5px;color:var(--ent-ink);font-weight:500;border-left:2px solid transparent;border-bottom:0;}
.cert-toc a:hover{background:#f2ecf7;color:var(--ent-plum);border-left-color:var(--ent-purple);border-bottom-color:transparent;}
.cert-toc a:target{background:#f2ecf7;color:var(--ent-plum);}
/* inline bundle download button */
.cert-dl{display:inline-block;padding:7px 14px;background:var(--ent-purple);color:#fff!important;border-radius:6px;font-weight:600;font-size:13px;border-bottom:0!important;}
.cert-dl:hover{background:var(--ent-plum);border-bottom-color:transparent;}
/* collapsible bundle contents */
.cert-details{margin:6px 0 12px;}
.cert-details>summary{cursor:pointer;color:var(--ent-purple);font-weight:600;font-size:13.5px;padding:5px 0;}
.cert-details>summary:hover{color:var(--ent-plum);}
/* CRL table: CRL(1) | Signing key AKI=SKI(2) | Generation(3); group-header rows span all 3 */
.cert-crl td:nth-child(1){white-space:nowrap;}
.cert-crl td:nth-child(2){font-family:Consolas,Menlo,monospace;font-size:12px;white-space:nowrap;}
.cert-crl-group th{background:#efe7f6;color:var(--ent-plum);font-weight:600;text-transform:none;letter-spacing:0;padding-top:9px;}
.cert-crl-group .cert-dn{color:#8a7fa0;margin-top:2px;}
.cert-row-pending th[scope="row"],.cert-row-pending td{background:#f7f4fb;color:#6a6472;}
/* --- facelift v2: sidebar layout, hero meta, callouts (2026-07-15) --- */
.ent-content{min-width:0;}
.ent-meta{margin:14px 0 0;font-size:13px;color:#d9c4ef;}
.ent-meta a{color:#fff;font-weight:600;border-bottom:1px solid rgba(255,255,255,.45);text-decoration:none;}
.ent-meta a:hover{border-bottom-color:#fff;}
.cert-set{scroll-margin-top:14px;}
.ent-content>.cert-set:first-child h2{margin-top:4px;border-top:0;padding-top:0;}
.cert-warn{background:#fdf3e0;border:1px solid #f2d7a0;border-left:4px solid #d99a1c;border-radius:8px;padding:10px 14px;color:#6a4a06;font-size:13px;margin:10px 0;}
.cert-warn strong{color:#8a5a00;}
.ent-main code{font-family:Consolas,Menlo,monospace;font-size:12.5px;background:#f2ecf7;padding:1px 5px;border-radius:4px;color:var(--ent-plum);}
@media (max-width:820px){
  .ent-main{grid-template-columns:1fr;gap:0;padding:12px 20px 22px;}
  .cert-toc{position:static;flex-direction:row;flex-wrap:wrap;gap:6px;margin:10px 0 16px;}
  .cert-toc-title{width:100%;border-bottom:0;padding:0 0 2px;margin-bottom:2px;}
  .cert-toc-group{display:none;}
  .cert-toc a{border-left:0;background:#f2ecf7;border:1px solid var(--ent-line);border-radius:20px;padding:5px 11px;color:var(--ent-purple);font-weight:600;}
  .cert-toc a:hover{background:var(--ent-purple);color:#fff;border-color:var(--ent-purple);}
}