createCertificate

Create an X.509 certificate signed by input.signerPrivateKey.

The certificate encodes input.subject, input.publicKey, and any supplied extensions. When serialNumber is omitted, a random positive serial number is generated. When validity is omitted, the certificate is valid from now for 30 days.

function createCertificate(
	input: CreateCertificateInput,
): Promise<CertificateMaterial>

Parameters

• input: CreateCertificateInput — Issuer, subject, key, validity, and extension settings.

Returns — The encoded certificate material.

Examples

const certificate = await createCertificate({
	issuer: { commonName: 'Example Root CA' },
	subject: { commonName: 'example.com' },
	publicKey: leafKeys.publicKey,
	signerPrivateKey: issuerKeys.privateKey,
	issuerPublicKey: issuerKeys.publicKey,
});