micro509Typed PKI for modern TypeScript

The zero-dependency TypeScript PKI toolkit for real certificate workflows.

Get Started

API Reference

GitHub

🔏
Typed Verification
Typed error codes with chain index and structured failure details. Build certificate flows your code can actually reason about.
🌐
Runs Everywhere
Pure WebCrypto, zero dependencies. Node, Bun, Deno, browsers, Cloudflare Workers.
📦
Broad PKI Workflow Coverage
Certificates, CSRs, chain verification, service identity, CRLs, OCSP, PFX/PKCS#12, PKCS#7, encrypted keys — with explicitly documented standards-conformance boundaries.
Conformance status
🛡️
Strict by Default
No any, no type assertions, no non-null assertions. Narrow defaults, explicit escape hatches.

See it run

Typed, runnable PKI in a few lines. Install it and mint a self-signed cert right here:

bash

npm install micro509

import { createSelfSignedCertificate } from 'micro509';

const { certificate, keyPair } = await createSelfSignedCertificate({
  subject: { commonName: 'example.com' },
  validity: { days: 365 },
});

console.log(certificate.pem);
console.log(`key type: ${keyPair.publicKey.algorithm.name}`);

micro509Typed PKI for modern TypeScript

Typed Verification

Runs Everywhere

Broad PKI Workflow Coverage

Strict by Default

See it run ​

See it run