ParsedCertificateRevocationList

Decoded X.509 CRL, returned by parseCertificateRevocationListDer and parseCertificateRevocationListPem.

interface ParsedCertificateRevocationList {
	readonly der?: Uint8Array;
	readonly version: number;
	readonly tbsCertListDer: Uint8Array;
	readonly signatureValue: Uint8Array;
	readonly issuer: ParsedName;
	readonly thisUpdate: Date;
	readonly nextUpdate?: Date;
	readonly signatureAlgorithmOid: string;
	readonly signatureAlgorithmName: string;
	readonly signatureAlgorithmParametersDer?: Uint8Array;
	readonly issuerPublicKeyAlgorithmOid?: string;
	readonly issuerPublicKeyParametersOid?: string;
	readonly authorityKeyIdentifier?: string;
	readonly crlNumber?: number;
	readonly baseCrlNumber?: number;
	readonly issuingDistributionPoint?: ParsedIssuingDistributionPoint;
	readonly freshestCrlDistributionPoints?: readonly ParsedDistributionPoint[];
	readonly revokedCertificates: readonly ParsedRevokedCertificate[];
}

Properties

• readonly der?: Uint8Array — Original DER bytes when this object came from parseCertificateRevocationListDer or PEM parsing.
• readonly version: number — CRL version (1 = v1, 2 = v2 with extensions).
• readonly tbsCertListDer: Uint8Array — DER-encoded TBSCertList — the signed payload for signature verification.
• readonly signatureValue: Uint8Array — Raw signature bytes from the CRL outer wrapper.
• readonly issuer: ParsedName — CRL issuer distinguished name.
• readonly thisUpdate: Date — Start of the CRL validity window.
• readonly nextUpdate?: Date — End of the CRL validity window. Absent if the CA does not commit to a schedule.
• readonly signatureAlgorithmOid: string — OID of the algorithm used to sign this CRL.
• readonly signatureAlgorithmName: string — Human-readable signature algorithm name (e.g. "ECDSA with SHA-256").
• readonly signatureAlgorithmParametersDer?: Uint8Array — DER-encoded signature algorithm parameters (e.g. DER NULL for RSA PKCS#1 v1.5).
• readonly issuerPublicKeyAlgorithmOid?: string — OID of the issuer's public key algorithm, when available.
• readonly issuerPublicKeyParametersOid?: string — OID of the issuer's public key parameters (e.g. named curve), when available.
• readonly authorityKeyIdentifier?: string — Hex-encoded Authority Key Identifier, if the extension is present.
• readonly crlNumber?: number — CRLNumber extension value — monotonically increasing sequence number.
• readonly baseCrlNumber?: number — Delta CRL indicator — present only on delta CRLs, referencing the base CRL number.
• readonly issuingDistributionPoint?: ParsedIssuingDistributionPoint — Issuing distribution point extension — scopes this CRL to a certificate subset.
• readonly freshestCrlDistributionPoints?: readonly ParsedDistributionPoint[] — Freshest CRL extension — points to delta CRL locations.
• readonly revokedCertificates: readonly ParsedRevokedCertificate[] — All revoked certificate entries (empty array if none).