CertificateInfo()

edit

Extracts information from an X.509 certificate.

Requires Extension: Crypto Extension

CertificateInfo( certificate=any );

Returns: Struct

Argument Description
certificate
any, required
edit

PEM string or Java X509Certificate object

Examples

edit
// Extract detailed information from a certificate (PEM string or certificate object)
keyPair = GenerateKeyPair( "RSA-2048" );
cert = GenerateSelfSignedCertificate(
	keyPair = keyPair,
	subject = "CN=localhost, O=My Org, C=AU"
);

info = CertificateInfo( cert ); // info is a struct containing: // subject - e.g. "CN=localhost, O=My Org, C=AU" // issuer - same as subject for self-signed certs // validFrom - date the certificate becomes valid // validTo - date the certificate expires // algorithm - e.g. "SHA256withRSA" // publicKeyAlgorithm - e.g. "RSA" or "EC" // serialNumber - unique serial number // selfSigned - boolean, true for self-signed certs // fingerprint - struct with sha1 and sha256 fingerprints
// Check if a certificate is still valid if ( now() > info.validTo ) { // certificate has expired }
// Get the SHA-256 fingerprint for pinning info.fingerprint.sha256; // e.g. "AB:CD:EF:12:34:..."

See also