Struct Certificate 

pub struct Certificate(/* private fields */);

Parsed X.509 certificate. Cheap to clone (Arc), Send + Sync.

Implementations

impl Certificate

pub fn from_der(der: impl Into<Bytes>) -> Result<Certificate, Error>

Parses a DER encoded certificate, taking ownership of the buffer (no copy).

Trailing data after the certificate is ignored (and dropped from Self::der).

Errors

Error::InvalidDer if the data is not a valid X.509 certificate, its version is unsupported, or its validity dates cannot be represented by SystemTime.

pub fn from_pem(pem: &[u8]) -> Result<Certificate, Error>

Parses the first CERTIFICATE (or X509 CERTIFICATE) block of a PEM document.

Errors

Error::InvalidPem if no certificate block is found or base64 is invalid, Error::InvalidDer if the decoded block is not a valid certificate.

pub fn from_pem_multi(pem: &[u8]) -> Result<Vec<Certificate>, Error>

Parses all CERTIFICATE blocks of a PEM document, in order.

Errors

See Self::from_pem. An empty document returns an empty list.

pub fn der(&self) -> &Bytes

DER encoding.

pub fn public_key_der(&self) -> &[u8]

DER encoded SubjectPublicKeyInfo.

pub fn version(&self) -> u32

X.509 version (1, 2 or 3).

pub fn serial_hex(&self) -> &str

Serial number, uppercase hex without leading zero bytes (OpenSSL BN_bn2hex style).

pub fn subject(&self) -> &str

Subject distinguished name (RFC 4514 style), for logging.

pub fn issuer(&self) -> &str

Issuer distinguished name (RFC 4514 style), for logging.

pub fn subject_der(&self) -> &[u8]

DER encoded subject name.

pub fn issuer_der(&self) -> &[u8]

DER encoded issuer name.

pub fn is_self_issued(&self) -> bool

Whether subject and issuer names are equal (byte comparison of the DER names); the signature is not checked.

pub fn key_type(&self) -> Option<KeyType>

Public key type, None for unsupported key types or curves.

pub fn subject_cn(&self) -> Option<&str>

First subject commonName, as encoded (no case folding).

pub fn san(&self) -> &SubjectAltNames

Subject alternative names.

pub fn not_before(&self) -> SystemTime

Start of the validity period.

pub fn not_after(&self) -> SystemTime

End of the validity period.

pub fn sha1(&self) -> &[u8; 20]

SHA-1 digest of the DER encoding (computed once).

pub fn sha256(&self) -> &[u8; 32]

SHA-256 digest of the DER encoding (computed once).

pub fn digest(&self, alg: Algorithm) -> &[u8]

Digest of the DER encoding (computed once per algorithm).

pub fn thumbprint(&self, alg: Algorithm) -> String

Thumbprint as lowercase hex.

pub fn to_pem(&self) -> String

PEM encoding (CERTIFICATE label, 64 column lines, trailing newline).

Trait Implementations

impl Clone for Certificate

fn clone(&self) -> Certificate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Certificate

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Certificate

impl PartialEq for Certificate

fn eq(&self, other: &Certificate) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.