micro509Typed PKI for modern TypeScript

The zero-dependency TypeScript PKI toolkit for real certificate workflows.

Get Started

API Reference

GitHub

🔏

Typed Verification

21 typed error codes with chain index and structured failure details. Build certificate flows your code can actually reason about.

🌐

Runs Everywhere

Pure WebCrypto, zero dependencies. Node, Bun, Deno, browsers, Cloudflare Workers.

📦

Full PKI Surface

Certificates, CSRs, chain verification, service identity, CRLs, OCSP, PFX/PKCS#12, PKCS#7, encrypted keys.

🛡️

Strict by Default

No any, no type assertions, no non-null assertions. Narrow defaults, explicit escape hatches.

See it run

Typed, runnable PKI in a few lines. Install it and mint a self-signed cert right here:

bash

npm install micro509

import { createSelfSignedCertificate } from 'micro509';

const { certificate, keyPair } =
  await createSelfSignedCertificate({
    subject: { commonName: 'example.com' },
    validity: { days: 365 },
  });

console.log(certificate.pem);
console.log(
  `key type: ${keyPair.publicKey.algorithm.name}`,
);