Struct CertIdentity 

pub struct CertIdentity { /* private fields */ }

Extracted identity information from a certificate.

This struct holds the relevant identity information extracted from an X.509 certificate for ANS verification purposes.

In production, construct via CertIdentity::from_der. The CertIdentity::new and CertIdentity::from_fingerprint_and_cn constructors are also public for programmatic use and testing.

Implementations

impl CertIdentity

pub fn common_name(&self) -> Option<&str>

Returns the Common Name (CN) from the certificate subject.

pub fn dns_sans(&self) -> &[String]

Returns the DNS Subject Alternative Names.

pub fn uri_sans(&self) -> &[String]

Returns the URI Subject Alternative Names.

pub fn fingerprint(&self) -> &CertFingerprint

Returns the certificate fingerprint.

pub fn new( common_name: Option<String>, dns_sans: Vec<String>, uri_sans: Vec<String>, fingerprint: CertFingerprint, ) -> Self

Create a new CertIdentity from components.

Use this when you’ve already extracted the certificate information using your TLS library (e.g., rustls, native-tls, openssl). If you have DER-encoded bytes, prefer CertIdentity::from_der.

pub fn from_der(der: &[u8]) -> Result<Self, CryptoError>

Create from DER-encoded certificate bytes.

Computes the SHA-256 fingerprint and extracts the Subject CN and Subject Alternative Names (DNS, URI) using x509-parser.

pub fn from_fingerprint_and_cn(fingerprint: CertFingerprint, cn: String) -> Self

Create from fingerprint and CN only.

Sets dns_sans to [cn] and uri_sans to empty. If you have DER-encoded bytes, prefer CertIdentity::from_der.

pub fn fqdn(&self) -> Option<&str>

Get the FQDN from the certificate.

Prefers DNS SAN over CN, following RFC 6125 recommendations.

pub fn ans_name(&self) -> Option<AnsName>

Get the ANS name from URI SANs.

pub fn version(&self) -> Option<Version>

Extract version from ANS name in URI SAN.

Trait Implementations

impl Clone for CertIdentity

fn clone(&self) -> CertIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.