Returns a pointer to a list of SANs. Each SAN is represented as a pointer to a list containing two items - the SAN type (IP, DNS, dirName, etc.) and its value. The value is represented in its decoded ASN.1 form.

Example return value:

  [
    [ "DNS", "example.com" ],
    [ "email", "foo@example.com" ]
  ]

METHODS

cn

Get the value of the subject CN field.

get_notbefore / get_notafter format

Returns the notbefore / notafter date in the given format. For allowed formats see OpenXPKI::DateTime::convert_date, without format a DateTime object is returned.

is_selfsigned

returns true if the certificate is self-signed.

Note: the check is (currently) done the subject/authority key identifier or by a comparison of subject and issuer DN and not on a cryptographic level - so there might be situations where this is not accurate.

is_ca

returns true if the certificate has the keyUsage keyCertSign and BasicContraints "cA" set (critical), false otherwise.