CreateCsrInput

Input for createCertificateSigningRequest.

interface CreateCsrInput {
	readonly subject: NameInput;
	readonly publicKey: CryptoKey;
	readonly signerPrivateKey: CryptoKey;
	readonly extensions?: CertificateExtensionsInput;
	readonly signature?: SignatureProfileInput;
}

Properties

• readonly subject: NameInput — Distinguished name for the CSR subject (e.g. { commonName: 'example.com' }).
• readonly publicKey: CryptoKey — WebCrypto public key to embed in the CSR's SubjectPublicKeyInfo.
• readonly signerPrivateKey: CryptoKey — WebCrypto private key used to self-sign the CSR (proves key possession).
• readonly extensions?: CertificateExtensionsInput — Requested X.509v3 extensions to include in the CSR attributes.
• readonly signature?: SignatureProfileInput — Override the signature algorithm profile (hash, salt length, etc.).