CreateSelfSignedCertificateBase

CreateSelfSignedCertificateBase

Fields common to both SelfSignedKeySource variants.

interface CreateSelfSignedCertificateBase {
	readonly subject: NameInput;
	readonly validity?: ValidityInput;
	readonly serialNumber?: Uint8Array;
	readonly extensions?: CertificateExtensionsInput;
	readonly signature?: SignatureProfileInput;
}

Properties

• readonly subject: NameInput — Subject distinguished name used as both subject and issuer.

• readonly validity?: ValidityInput — Validity window configuration.

• readonly serialNumber?: Uint8Array — DER integer bytes for the certificate serial number.

  RFC 5280 §4.1.2.2 requires a positive value of at most 20 octets. When omitted, a random positive 16-byte serial number is generated.

• readonly extensions?: CertificateExtensionsInput — X.509 extensions to encode into the certificate.

• readonly signature?: SignatureProfileInput — Signature algorithm override.