CreateCertificateInput

Input for createCertificate.

interface CreateCertificateInput {
	readonly issuer: NameInput;
	readonly subject: NameInput;
	readonly publicKey: CryptoKey;
	readonly signerPrivateKey: CryptoKey;
	readonly issuerPublicKey?: CryptoKey;
	readonly validity?: ValidityInput;
	readonly serialNumber?: Uint8Array;
	readonly extensions?: CertificateExtensionsInput;
	readonly signature?: SignatureProfileInput;
}

Properties

• readonly issuer: NameInput — Issuer distinguished name.

• readonly subject: NameInput — Subject distinguished name.

• readonly publicKey: CryptoKey — Subject public key to encode into the certificate.

• readonly signerPrivateKey: CryptoKey — Private key used to sign the certificate.

• readonly issuerPublicKey?: CryptoKey — Issuer public key.

  Provide this when extension builders need issuer key material, such as authority key identifier derivation.

• readonly validity?: ValidityInput — Validity window configuration.

• readonly serialNumber?: Uint8Array — DER integer bytes for the certificate serial number.

  When omitted, a random positive 16-byte serial number is generated.

• readonly extensions?: CertificateExtensionsInput — X.509 extensions to encode into the certificate.

• readonly signature?: SignatureProfileInput — Signature algorithm override.

  When omitted, the library selects a compatible profile from the signing key.