buildCertificateExtensions

Build the v3 extensions block for a certificate.

Automatically adds SKI, AKI (when issuer key is available), and basicConstraints (defaults to { ca: false }). Additional extensions come from the caller's CertificateExtensionsInput.

function buildCertificateExtensions(
	subjectPublicKeyInfo: Uint8Array,
	issuerPublicKeyInfo: Uint8Array | undefined,
	input: CertificateExtensionsInput | undefined,
	_: unknown,
): Uint8Array[]

Parameters

• subjectPublicKeyInfo: Uint8Array — DER-encoded SPKI of the subject.
• issuerPublicKeyInfo: Uint8Array | undefined — DER-encoded SPKI of the issuer, or undefined for self-signed.
• input: CertificateExtensionsInput | undefined — Optional extension configuration.
• _: unknown

Returns — Array of DER-encoded Extension SEQUENCEs.