Module cert 

Certificate parsing for the log server.

Wraps confium_pki::cert::Certificate to extract the metadata the cert-aware API endpoints need: issuer DN, subject DN, validity window, SHA-256 fingerprint.

Structs

CertMetadata

Functions

classify_cert

Classify a certificate into one of the Confium “artifact types” based on the Extended Key Usage extension (if present). CNML certificates, code-signing certs, document-signing certs, TLS server certs, etc. each get a distinct type label.

fingerprint

Compute the SHA-256 fingerprint of a byte slice. Used as the leaf hash for cert entries.

parse_der

Parse a DER-encoded X.509 certificate and extract the metadata the log server stores alongside the leaf hash. The leaf hash is SHA-256 of the DER bytes (the certificate fingerprint).