generateCertificate

Callable

• generateCertificate(description: TBSCertificateDescription, issuerKeyPair?: CryptoKeyPair): Promise<GeneratedCertificate>

---

• Generates an X.509 certificate from the given description.

  If the issuer key pair is provided, the certificate will be signed using the provided issuer’s private key. Otherwise, the certificate will be self-signed.

  The code below is underdocumented. The following links may provide more clarity about X.509, ASN.1, DER, PEM, and other data formats this module encodes:

  • https://letsencrypt.org/docs/a-warm-welcome-to-asn1-and-der/
  • https://dev.to/wayofthepie/structure-of-an-ssl-x-509-certificate-16b
  • https://www.oss.com/asn1/resources/asn1-made-simple/asn1-quick-reference/asn1-tags.html

  ---

  Parameters

  • description: TBSCertificateDescription

  • optionalissuerKeyPair: CryptoKeyPair

  Returns Promise<GeneratedCertificate>