x509-certificate

The class of x509-certificate objects. Such objects are associated with SSL sockets. Objects of this class are created by the get-ssl-peer-certificate generic function.

This class has the following slots and accessors (the accessor names have x509-certificate- prepended to the slot name; the slot name is linked to th accessor description). At the moment, setting the value of a slot serves no purpose. See also the associated accessor operator pages.

• version: this slot contains a keyword indicating the version number of the certificate. The value will be either (:v1, :v2, or :v3). If the version number of the certificate is not recognized, this slot will contain the raw integer supplied in the certificate.

  The version number indicates the format of the certificate. Most certificates seen these days will be version 3 certificates (:v3).

• serial-number: this slot contains the serial number of the certificate, in integer form.
• not-before: this slot contains the beginning validity date of the certificate, in universal time format.
• not-after: this slot contains the expiration date of the certificate, in universal time format.
• issuer: this slot contains information about the issuer (i.e., signer) of the certificate. The issuer information is represented as a list of attribute/value conses. The car of each cons is a string representing the attribute type ("CN", "ST", "L", "O", "OU", "CN", etc.) and the cdr of each cons is a string representing the value of the attribute.
• subject: this slot contains information about the subject of the certificate (i.e., the entity to which the certificate belongs). The subject information is represented in the same way as the issuer information described in the discussion of the issuer slot above.
• subject-alt-name: this slot contains information about the subjectAltName extension information which may be part of v3 certificates. If available, the subjectAltName information is represented as a list of attribute/value conses. The car of each cons is a string representing the type of subjectAltName (such as "DNS"). The cdr of each cons is a string representing the attribute value.

See socket.htm.

Copyright (c) 1998-2016, Franz Inc. Oakland, CA., USA. All rights reserved.
This page was not revised from the 8.1 page.
Created 2010.1.21.