ParsedCertificateSigningRequest

A fully decoded PKCS#10 Certificate Signing Request.

Extension fields mirror ParsedCertificate but come from the CSR's extensionRequest attribute rather than the v3 extensions block.

interface ParsedCertificateSigningRequest<TMap extends ExtensionDecoderMap> {
	readonly version: number;
	readonly certificationRequestInfoDer: Uint8Array;
	readonly subjectPublicKeyInfoDer: Uint8Array;
	readonly signatureValue: Uint8Array;
	readonly subject: ParsedName;
	readonly signatureAlgorithmOid: string;
	readonly signatureAlgorithmName: string;
	readonly signatureAlgorithmParametersDer?: Uint8Array;
	readonly publicKeyAlgorithmOid: string;
	readonly publicKeyAlgorithmName: string;
	readonly publicKeyAlgorithmParametersDer?: Uint8Array;
	readonly publicKeyParametersOid?: string;
	readonly requestedExtensions: readonly ParsedExtension[];
	readonly basicConstraints?: BasicConstraints;
	readonly keyUsage?: ParsedBitFlags<KeyUsage>;
	readonly extendedKeyUsage?: readonly ExtendedKeyUsage[];
	readonly subjectAltNames?: readonly SubjectAltName[];
	readonly nameConstraints?: NameConstraints<ParsedNameConstraintForm>;
	readonly certificatePolicies?: CertificatePolicies;
	readonly policyMappings?: PolicyMappings;
	readonly policyConstraints?: PolicyConstraints;
	readonly inhibitAnyPolicy?: InhibitAnyPolicy;
	readonly authorityInfoAccess?: readonly AuthorityInformationAccess[];
	readonly crlDistributionPoints?: readonly ParsedDistributionPoint[];
	readonly decodedExtensions?: readonly DecodedExtensionValue<unknown>[];
	readonly decodedExtensionMap?: DecodedExtensionMap<TMap>;
}

Properties

• readonly version: number — PKCS#10 version number (always 1).
• readonly certificationRequestInfoDer: Uint8Array — DER encoding of the CertificationRequestInfo, used for signature verification.
• readonly subjectPublicKeyInfoDer: Uint8Array — DER encoding of the SubjectPublicKeyInfo.
• readonly signatureValue: Uint8Array — Raw signature bytes (BIT STRING content, padding removed).
• readonly subject: ParsedName — Distinguished name the requester wants on the certificate.
• readonly signatureAlgorithmOid: string — OID of the algorithm used to sign this CSR.
• readonly signatureAlgorithmName: string — Human-readable signature algorithm name (e.g. "ECDSA with SHA-256").
• readonly signatureAlgorithmParametersDer?: Uint8Array — DER-encoded parameters for the signature algorithm. Absent for algorithms with no parameters.
• readonly publicKeyAlgorithmOid: string — OID of the subject's public key algorithm.
• readonly publicKeyAlgorithmName: string — Human-readable public key algorithm name (e.g. "EC P-256").
• readonly publicKeyAlgorithmParametersDer?: Uint8Array — DER-encoded parameters for the public key algorithm.
• readonly publicKeyParametersOid?: string — OID of the named curve or other key sub-parameter, when present.
• readonly requestedExtensions: readonly ParsedExtension[] — All requested extensions as raw ParsedExtensions.
• readonly basicConstraints?: BasicConstraints — Decoded Basic Constraints from the extensionRequest attribute.
• readonly keyUsage?: ParsedBitFlags<KeyUsage> — Decoded Key Usage from the extensionRequest attribute.
• readonly extendedKeyUsage?: readonly ExtendedKeyUsage[] — Decoded Extended Key Usage from the extensionRequest attribute.
• readonly subjectAltNames?: readonly SubjectAltName[] — Decoded Subject Alternative Names from the extensionRequest attribute.
• readonly nameConstraints?: NameConstraints<ParsedNameConstraintForm> — Decoded Name Constraints from the extensionRequest attribute.
• readonly certificatePolicies?: CertificatePolicies — Decoded Certificate Policies from the extensionRequest attribute.
• readonly policyMappings?: PolicyMappings — Decoded Policy Mappings from the extensionRequest attribute.
• readonly policyConstraints?: PolicyConstraints — Decoded Policy Constraints from the extensionRequest attribute.
• readonly inhibitAnyPolicy?: InhibitAnyPolicy — Decoded Inhibit anyPolicy from the extensionRequest attribute.
• readonly authorityInfoAccess?: readonly AuthorityInformationAccess[] — Decoded Authority Information Access from the extensionRequest attribute.
• readonly crlDistributionPoints?: readonly ParsedDistributionPoint[] — Decoded CRL Distribution Points from the extensionRequest attribute.
• readonly decodedExtensions?: readonly DecodedExtensionValue<unknown>[] — Custom-decoded extensions from ParseOptions.decoders.
• readonly decodedExtensionMap?: DecodedExtensionMap<TMap> — Custom-decoded extensions from ParseOptions.decoderMap.