CandidatePath

A signature-verified certification path from leaf to root, before constraint validation.

interface CandidatePath {
	readonly leaf: ParsedCertificate;
	readonly chain: readonly ParsedCertificate[];
	readonly root: ParsedCertificate;
}

Properties

• readonly leaf: ParsedCertificate — Parsed end-entity certificate.
• readonly chain: readonly ParsedCertificate[] — Full chain in leaf-to-root order (includes both leaf and root).
• readonly root: ParsedCertificate — Trusted root that terminates the path.