CreateCertificateRevocationListInput

Input for createCertificateRevocationList.

interface CreateCertificateRevocationListInput {
	readonly issuer: NameInput;
	readonly signerPrivateKey: CryptoKey;
	readonly issuerPublicKey?: CryptoKey;
	readonly thisUpdate?: Date;
	readonly nextUpdate?: Date;
	readonly revokedCertificates?: readonly RevokedCertificateInput[];
	readonly crlNumber?: number;
	readonly baseCrlNumber?: number;
	readonly issuingDistributionPoint?: IssuingDistributionPoint;
	readonly freshestCrlDistributionPoints?: readonly DistributionPoint[];
}

Properties

• readonly issuer: NameInput — Distinguished name of the CRL issuer (typically the signing CA).
• readonly signerPrivateKey: CryptoKey — Private key used to sign the CRL. Algorithm is inferred from the key.
• readonly issuerPublicKey?: CryptoKey — Issuer public key — used to embed an Authority Key Identifier extension.
• readonly thisUpdate?: Date — Issuance timestamp. Defaults to new Date().
• readonly nextUpdate?: Date — Planned next issuance. Omit for an open-ended CRL.
• readonly revokedCertificates?: readonly RevokedCertificateInput[] — Certificates to list as revoked in this CRL.
• readonly crlNumber?: number — Monotonically-increasing CRL sequence number (CRLNumber extension).
• readonly baseCrlNumber?: number — If set, marks this CRL as a delta CRL referencing the given base CRL number.
• readonly issuingDistributionPoint?: IssuingDistributionPoint — Issuing distribution point extension — scopes this CRL to a subset of certificates.
• readonly freshestCrlDistributionPoints?: readonly DistributionPoint[] — Freshest CRL distribution points — tells relying parties where to find delta CRLs.