PeerCertificate - Node documentation
interface PeerCertificate

Usage

import { type PeerCertificate } from "node:tls";

Properties

ca: boolean

true if a Certificate Authority (CA), false otherwise.

raw: Buffer

The DER encoded X.509 certificate data.

subject: Certificate

The certificate subject.

issuer: Certificate

The certificate issuer, described in the same terms as the subject.

valid_from: string

The date-time the certificate is valid from.

valid_to: string

The date-time the certificate is valid to.

serialNumber: string

The certificate serial number, as a hex string.

fingerprint: string

The SHA-1 digest of the DER encoded certificate. It is returned as a : separated hexadecimal string.

fingerprint256: string

The SHA-256 digest of the DER encoded certificate. It is returned as a : separated hexadecimal string.

fingerprint512: string

The SHA-512 digest of the DER encoded certificate. It is returned as a : separated hexadecimal string.

optional
ext_key_usage: string[]

The extended key usage, a set of OIDs.

optional
subjectaltname: string

A string containing concatenated names for the subject, an alternative to the subject names.

optional
infoAccess: Dict<string[]>

An array describing the AuthorityInfoAccess, used with OCSP.

optional
bits: number

For RSA keys: The RSA bit size.

For EC keys: The key size in bits.

optional
exponent: string

The RSA exponent, as a string in hexadecimal number notation.

optional
modulus: string

The RSA modulus, as a hexadecimal string.

optional
pubkey: Buffer

The public key.

optional
asn1Curve: string

The ASN.1 name of the OID of the elliptic curve. Well-known curves are identified by an OID. While it is unusual, it is possible that the curve is identified by its mathematical properties, in which case it will not have an OID.

optional
nistCurve: string

The NIST name for the elliptic curve,if it has one (not all well-known curves have been assigned names by NIST).