include module type of struct include X509.Certificate endX509v3 certificate
val decode_pkcs1_digest_info :
Cstruct.t ->
(Mirage_crypto.Hash.hash * Cstruct.t, [> Rresult.R.msg ]) Rresult.resultdecode_pkcs1_digest_info buffer is hash, signature, the hash and raw signature of the given buffer in ASN.1 DER encoding, or an error.
val encode_pkcs1_digest_info :
(Mirage_crypto.Hash.hash * Cstruct.t) ->
Cstruct.tencode_pkcs1_digest_info (hash, signature) is data, the ASN.1 DER encoded hash and signature.
type t = X509.Certificate.tThe abstract type of a certificate.
val pp : t Fmt.tpp ppf cert pretty-prints the certificate.
val decode_der : Cstruct.t -> (t, [> Rresult.R.msg ]) Rresult.resultdecode_der cstruct is certificate, the ASN.1 decoded certificate or an error.
val encode_der : t -> Cstruct.tencode_der certificate is cstruct, the ASN.1 encoded representation of the certificate.
val decode_pem_multiple :
Cstruct.t ->
(t list, [> Rresult.R.msg ]) Rresult.resultdecode_pem_multiple pem is t list, where all certificates of the pem are extracted
val decode_pem : Cstruct.t -> (t, [> Rresult.R.msg ]) Rresult.resultdecode_pem pem is t, where the single certificate of the pem is extracted
val encode_pem_multiple : t list -> Cstruct.tencode_pem_multiple certificates is pem, the pem encoded certificates.
val encode_pem : t -> Cstruct.tencode_pem certificate is pem, the pem encoded certificate.
The polymorphic variant of public key types.
supports_keytype certificate key_type is result, whether public key of the certificate matches the given key_type.
val public_key : t -> X509.Public_key.tpublic_key certificate is pk, the public key of the certificate.
val signature_algorithm :
t ->
([ `RSA | `ECDSA | `ED25519 ] * Mirage_crypto.Hash.hash) optionsignature_algorithm certificate is the algorithm used for the signature.
val hostnames : t -> X509.Host.Set.thostnames certficate is the set of domain names this certificate is valid for. Currently, these are the DNS names of the Subject Alternative Name extension, if present, or otherwise the singleton set containing the common name of the certificate subject.
val supports_hostname : t -> [ `host ] Domain_name.t -> boolsupports_hostname certificate hostname is result, whether the certificate contains the given hostname, using hostnames.
val fingerprint : Mirage_crypto.Hash.hash -> t -> Cstruct.tfingerprint hash cert is digest, the digest of cert using the specified hash algorithm
val subject : t -> X509.Distinguished_name.tsubject certificate is dn, the subject as dn of the certificate.
val issuer : t -> X509.Distinguished_name.tissuer certificate is dn, the issuer as dn of the certificate.
val serial : t -> Z.tserial certificate is sn, the serial number of the certificate.
val validity : t -> Ptime.t * Ptime.tvalidity certificate is from, until, the validity of the certificate.
val extensions : t -> X509.Extension.textensions certificate is the extension map of certificate.