CreateCertificateRevocationListInput

CreateCertificateRevocationListInput

Input for createCertificateRevocationList.

interface CreateCertificateRevocationListInput {
	readonly issuer: NameInput;
	readonly signerPrivateKey: CryptoKey;
	readonly issuerCertificate: CrlCertificateSource;
	readonly thisUpdate?: Date;
	readonly nextUpdate: Date;
	readonly revokedCertificates?: readonly RevokedCertificateInput[];
	readonly crlNumber: number | bigint;
	readonly baseCrlNumber?: number | bigint;
	readonly issuingDistributionPoint?: IssuingDistributionPoint;
	readonly freshestCrlDistributionPoints?: readonly DistributionPoint[];
}

Properties

• readonly issuer: NameInput — Distinguished name of the CRL issuer (typically the signing CA).
• readonly signerPrivateKey: CryptoKey — Private key used to sign the CRL. Algorithm is inferred from the key.
• readonly issuerCertificate: CrlCertificateSource — Certificate of the CRL issuer. Its subject key identifier becomes the Authority Key Identifier extension (RFC 5280 §5.2.1). An issuer certificate without one yields a key identifier derived from its public key.
• readonly thisUpdate?: Date — Issuance timestamp. Defaults to new Date().
• readonly nextUpdate: Date — Date by which the next CRL will be issued. Must be at least one second later than thisUpdate.
• readonly revokedCertificates?: readonly RevokedCertificateInput[] — Certificates to list as revoked in this CRL.
• readonly crlNumber: number | bigint — Monotonically-increasing CRL sequence number (CRLNumber extension, RFC 5280 §5.2.3): non-negative and at most 20 octets encoded. Pass a bigint above Number.MAX_SAFE_INTEGER.
• readonly baseCrlNumber?: number | bigint — If set, marks this CRL as a delta CRL referencing the given base CRL number, bounded like crlNumber.
• readonly issuingDistributionPoint?: IssuingDistributionPoint — Issuing distribution point extension — scopes this CRL to a subset of certificates.
• readonly freshestCrlDistributionPoints?: readonly DistributionPoint[] — Freshest CRL distribution points — tells relying parties where to find delta CRLs.