Check accomplishes the entire process of linting: it generates a throwaway signing key, uses that to create a linting cert, and runs a default set of lints (everything except for the ETSI and EV lints) against it.

CheckCRL is like Check, but for CRLs.

New constructs a Linter.

NewRegistry returns a zlint Registry with irrelevant (ETSI, EV) lints excluded.

Linter is capable of linting a to-be-signed (TBS) certificate.