Certificate share link

No login required — access is gated by a signed, expiring token.