VerifiedCertificateChain

VerifiedCertificateChain

Fully verified certificate chain returned on success from verifyCertificateChain.

interface VerifiedCertificateChain {
	readonly leaf: ParsedCertificate;
	readonly chain: readonly ParsedCertificate[];
	readonly root: ParsedCertificate;
	readonly policyValidation: PolicyValidationOutcome;
	readonly trustAnchor?: TrustAnchor;
}

Properties

• readonly leaf: ParsedCertificate — Parsed end-entity certificate.
• readonly chain: readonly ParsedCertificate[] — Full chain in leaf-to-root order.
• readonly root: ParsedCertificate — Trusted root that terminates the path.
• readonly policyValidation: PolicyValidationOutcome — Final RFC 5280 §6 / RFC 9618 constrained policy outputs for this validated path.
• readonly trustAnchor?: TrustAnchor — Selected bare trust anchor, when the path terminates without a root certificate.