ParsedOcspResponse

Decoded OCSP response, returned by parseOcspResponseDer / parseOcspResponsePem.

When responseStatus is not 'successful', most fields are absent.

interface ParsedOcspResponse {
	readonly der?: Uint8Array;
	readonly responseStatus: OcspResponseStatus;
	readonly responseTypeOid?: string;
	readonly responseDataDer?: Uint8Array;
	readonly responderId?: ParsedOcspResponderId;
	readonly signatureAlgorithmOid?: string;
	readonly signatureAlgorithmName?: string;
	readonly signatureValue?: Uint8Array;
	readonly producedAt?: Date;
	readonly responses?: readonly ParsedOcspSingleResponse[];
	readonly nonce?: string;
	readonly certificates?: readonly ParsedCertificate[];
}

Properties

• readonly der?: Uint8Array — Original DER bytes when this object came from parseOcspResponseDer or PEM parsing.
• readonly responseStatus: OcspResponseStatus — Overall response status. Only 'successful' carries a BasicOCSPResponse body.
• readonly responseTypeOid?: string — OID of the response type (normally id-pkix-ocsp-basic).
• readonly responseDataDer?: Uint8Array — DER-encoded ResponseData — the signed payload for signature verification.
• readonly responderId?: ParsedOcspResponderId — How the responder identifies itself.
• readonly signatureAlgorithmOid?: string — OID of the algorithm used to sign this response.
• readonly signatureAlgorithmName?: string — Human-readable signature algorithm name.
• readonly signatureValue?: Uint8Array — Raw signature bytes.
• readonly producedAt?: Date — Timestamp when the responder produced this response.
• readonly responses?: readonly ParsedOcspSingleResponse[] — Per-certificate status entries.
• readonly nonce?: string — Hex-encoded nonce, if the response echoed one.
• readonly certificates?: readonly ParsedCertificate[] — Certificates embedded in the response (typically the responder's chain).