# Poco::Crypto

# class X509Certificate

Library: Crypto
Package: Certificate
Header: Poco/Crypto/X509Certificate.h

## Description

This class represents a X509 Certificate.

## Inheritance

Known Derived Classes: Poco::Net::X509Certificate

## Member Summary

Member Functions: certificate, commonName, expiresOn, extractNames, init, issuedBy, issuerName, load, operator =, save, subjectName, swap, validFrom

## Enumerations

### NID

Name identifier for extracting information from a certificate subject's or issuer's distinguished name.

NID_COMMON_NAME = 13

NID_COUNTRY = 14

NID_LOCALITY_NAME = 15

NID_STATE_OR_PROVINCE = 16

NID_ORGANIZATION_NAME = 17

NID_ORGANIZATION_UNIT_NAME = 18

## Constructors

### X509Certificate

explicit X509Certificate(
std::istream & istr
);

Creates the X509Certificate object by reading a certificate in PEM format from a stream.

### X509Certificate

explicit X509Certificate(
const std::string & path
);

Creates the X509Certificate object by reading a certificate in PEM format from a file.

### X509Certificate

explicit X509Certificate(
X509 * pCert
);

Creates the X509Certificate from an existing OpenSSL certificate. Ownership is taken of the certificate.

### X509Certificate

X509Certificate(
const X509Certificate & cert
);

Creates the certificate by copying another one.

### X509Certificate

X509Certificate(
X509 * pCert,
bool shared
);

Creates the X509Certificate from an existing OpenSSL certificate. Ownership is taken of the certificate. If shared is true, the certificate's reference count is incremented.

## Destructor

### ~X509Certificate

~X509Certificate();

Destroys the X509Certificate.

## Member Functions

### certificate

const X509 * certificate() const;

Returns the underlying OpenSSL certificate.

### commonName

std::string commonName() const;

Returns the common name stored in the certificate subject's distinguished name.

### expiresOn

Poco::DateTime expiresOn() const;

Returns the date and time the certificate expires.

### extractNames

void extractNames(
std::string & commonName,
std::set < std::string > & domainNames
) const;

Extracts the common name and the alias domain names from the certificate.

### issuedBy

bool issuedBy(
const X509Certificate & issuerCertificate
) const;

Checks whether the certificate has been issued by the issuer given by issuerCertificate. This can be used to validate a certificate chain.

Verifies if the certificate has been signed with the issuer's private key, using the public key from the issuer certificate.

Returns true if verification against the issuer certificate was successfull, false otherwise.

### issuerName

const std::string & issuerName() const;

Returns the certificate issuer's distinguished name.

### issuerName

std::string issuerName(
NID nid
) const;

Extracts the information specified by the given NID (name identifier) from the certificate issuer's distinguished name.

### operator =

X509Certificate & operator = (
const X509Certificate & cert
);

Assigns a certificate.

### save

void save(
std::ostream & stream
) const;

Writes the certificate to the given stream. The certificate is written in PEM format.

### save

void save(
const std::string & path
) const;

Writes the certificate to the file given by path. The certificate is written in PEM format.

### subjectName

const std::string & subjectName() const;

Returns the certificate subject's distinguished name.

### subjectName

std::string subjectName(
NID nid
) const;

Extracts the information specified by the given NID (name identifier) from the certificate subject's distinguished name.

### swap

void swap(
X509Certificate & cert
);

Exchanges the certificate with another one.

### validFrom

Poco::DateTime validFrom() const;

Returns the date and time the certificate is valid from.

### init

void init();

Extracts issuer and subject name from the certificate.

### load

void load(
std::istream & stream
);

Loads the certificate from the given stream. The certificate must be in PEM format.

### load

void load(
const std::string & path
);

Loads the certificate from the given file. The certificate must be in PEM format.