JwksFetch | Batch Downloader

Fetch a public verification key from a JWKS endpoint (or via OIDC discovery) and emit it as PEM.