How we built certgrep.sh, a free regex search engine over certificate transparency, using an occurrence-only index, just-in-time hydration, and a Tantivy trigram index.