Struct Certificate 

pub struct Certificate {
    pub chain: Vec<CertificateDer<'static>>,
    pub private_key: Option<Arc<PrivateKeyDer<'static>>>,
    pub ocsp_staple: Option<Vec<u8>>,
    pub names: Vec<String>,
    pub tags: Vec<String>,
    /* private fields */
}

A certificate with its chain, key, names, and maintenance metadata .

Fields

chain: Vec<CertificateDer<'static>>

The full certificate chain (leaf first).

private_key: Option<Arc<PrivateKeyDer<'static>>>

The encoded private key, when available. Challenge certificates may retain a provider signing key instead; external managers may omit it.

ocsp_staple: Option<Vec<u8>>

The most recent OCSP staple served with the certificate.

names: Vec<String>

All names the certificate covers, normalized (lowercased, trimmed).

tags: Vec<String>

User tags attached to this certificate.

Implementations

impl Certificate

pub fn empty() -> Self

An empty certificate`-style placeholder).

pub fn is_empty(&self) -> bool

Whether this is the empty certificate.

pub fn hash(&self) -> &str

The chain hash (cache key)`).

pub fn managed(&self) -> bool

Whether certmagic manages this certificate.

pub fn issuer_key(&self) -> &str

The issuer key (storage prefix) for this certificate.

pub fn expired_at(&self, now: OffsetDateTime) -> bool

Whether the leaf has expired. false when no parsed leaf is available (e.g. synthesized TLS-ALPN challenge certificates).

pub fn lifetime_remaining(&self, now: OffsetDateTime) -> Option<Duration>

Remaining lifetime of the leaf, if parsed.

pub fn lifetime(&self) -> Option<Duration>

Total lifetime of the leaf (NotAfter − NotBefore), if parsed.

pub fn has_tag(&self, tag: &str) -> bool

Whether this certificate carries tag.

pub fn pem_bundle(&self) -> Vec<u8>

The full PEM bundle of the chain (leaf first), used for OCSP staple keys.

pub fn ari_replaces_id(&self) -> Option<String>

The ARI replaces certID for this certificate (draft-ietf-acme-ari-03 §4.1): base64url(AKI keyIdentifier) + "." + base64url(serial). None when the leaf has no AKI extension or has not been parsed.

Trait Implementations

impl Clone for Certificate

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Certificate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.