Struct ParsedCertificate 

pub struct ParsedCertificate<'a> {

    pub der: &'a [u8],
    pub spki: &'a [u8],
    pub public_key: &'a [u8],
    pub issuer_dn: &'a [u8],
    pub subject_dn: &'a [u8],
    pub tbs: &'a [u8],
    pub signature_value: &'a [u8],
    pub sig_alg_oid: &'a [u8],
    pub spki_alg_oid: &'a [u8],
    pub is_ca: Option<bool>,
    pub has_server_auth_eku: Option<bool>,
    pub not_before: u64,
    pub not_after: u64,
}

A pre-parsed X.509 certificate with all commonly accessed fields extracted in a single DER walk.

Fields

der: &'a [u8]

Full DER encoding.

spki: &'a [u8]

SubjectPublicKeyInfo DER.

public_key: &'a [u8]

Raw public key bytes (BIT STRING content, minus unused-bits byte).

issuer_dn: &'a [u8]

Issuer Distinguished Name (value of the Name SEQUENCE).

subject_dn: &'a [u8]

Subject Distinguished Name (value of the Name SEQUENCE).

tbs: &'a [u8]

TBSCertificate raw bytes (tag + length + value) — the signed portion.

signature_value: &'a [u8]

Signature value bytes (BIT STRING content).

sig_alg_oid: &'a [u8]

Signature algorithm OID.

spki_alg_oid: &'a [u8]

SPKI algorithm OID.

is_ca: Option<bool>

Whether Basic Constraints cA is TRUE (None = extension absent).

has_server_auth_eku: Option<bool>

Whether EKU includes serverAuth (None = extension absent).

not_before: u64

notBefore as Unix timestamp (seconds since epoch).

not_after: u64

notAfter as Unix timestamp (seconds since epoch).

Implementations

impl<'a> ParsedCertificate<'a>

pub fn from_der(der: &'a [u8]) -> Result<Self, Error>

Parse a DER-encoded X.509 certificate, extracting all fields at once.