Struct SelfSignedCert 

pub struct SelfSignedCert {
    pub cert_chain: Vec<CertificateDer<'static>>,
    pub private_key: PrivateKeyDer<'static>,
}

The cert material behind the TlsIdentity::SelfSigned server path: a single rcgen-generated DER cert plus its PKCS#8 private key.

Validity facts (review 001 §C-1, verified against rcgen 0.13’s CertificateParams::default()): the generated cert is valid 1975→4096 — i.e. never expires in practice — and carries no SANs, so CA verification of it fails as expected for a dev cert. Pinning its SHA256: fingerprint therefore outlives any plausible deployment by design; if a tighter validity is ever wanted, CertificateParams::not_before / not_after are additive params.

Fields

cert_chain: Vec<CertificateDer<'static>>

The self-signed leaf certificate (DER). No SANs, validity 1975→4096 (see the type’s doc).

private_key: PrivateKeyDer<'static>

The matching private key (PKCS#8 DER).