micro509 API Reference

• micro509 — Stable root import for micro509.
• micro509/crypto — Canonical detached-signature crypto surface.
• micro509/der — DER reading and writing primitives.
• micro509/jose — Optional JOSE surface: signed compact JWS and JWT (RS256), JWK Sets, and opt-in remote JWKS
• micro509/kdf — Optional byte-oriented Argon2 key derivation with explicit resource limits.
• micro509/keys — Generate keys and move them between WebCrypto, PEM, DER, and JWK formats.
• micro509/pem — Canonical PEM boundary surface.
• micro509/pkcs — PKCS container APIs: PFX/PKCS#12 and PKCS#7/CMS.
• micro509/result — Canonical shared result surface.
• micro509/revocation — Create and validate CRLs and OCSP responses, then check certificate status.
• micro509/ssh — Read and write OpenSSH public-key lines, unencrypted openssh-key-v1
• micro509/verify — Validate certificate chains, application purposes, and service identities.
• micro509/x509 — Create and inspect certificates, CSRs, names, and extensions.