x509 certificate

Returns True when the client has received its certificate from the server

Provides the encryption certificate that is currently active and which will be used by clients to encrypt reports.

Reads and returns the certificate from a file in the PEM format. This can be used to analyze encryption credentials on decrypting relays or root servers.

Returns the end of the validity period of the certificate, encoded as differential to UTC time.

Returns the date on which the certificate first becomes valid. This is useful for examining encryption certificates, where the 'invalid before date' is the time when the encryption credentials were generated.

Returns the name of the entity that signed and issued the certificate. The issuer contains a non-empty distinguished name (DN).

For example, "C=US, ST=California, O=John Doe".

Returns the algorithm identifier used to generate the public key. Signature algorithm descriptions can be found in RFC5758 and RFC5480 (which update RFC3279).

Returns the unique identifying number assigned by the CA. Normally, it is a positive integer no longer than 20 octets long (2¹⁶⁰).

Non-conforming CAs may issue certificates with serial numbers that are zero, negative integers, or longer than the specified maximum, however.

Returns the SHA1 hash of the given certificate, which uniquely identifies it.

Returns the algorithm identifier used by the CA to sign the certificate. Signature algorithm descriptions can be found in RFC5758 and RFC5480 (which update RFC3279), and RFC4055.

Returns the entity associated with the public key. The subject contains a non-empty common name (CN).

Returns the entity associated with the public key. The subject contains a non-empty distinguished name (DN).

For example, "C=US, ST=California, O=John Doe".

Returns a value (1, 2 or 3) that describes the version of the encoded certificate.