certcheck is a utility to show and check the contents of certificates.

crlcheck is a utility to show and check the contents of certificate revocation lists (CRLs).

CertificateFromPEM takes a certificate in PEM format and returns the corresponding x509.Certificate object.

CertificatesFromPEM parses one or more certificates from the given PEM data.

CertificateToString generates a string describing the given certificate.

CRLToString generates a string describing the given certificate revocation list.

ExtractSCT deserializes an SCT from a TLS-encoded SCT.

GeneralNamesToString creates a string description of an x509.GeneralNames object.

GetIssuer attempts to retrieve the issuer for a certificate, by examining the cert's Authority Information Access extension (if present) for the issuer's URL and retrieving from there.

MarshalSCTsIntoSCTList serializes SCTs into SCT list.

NameToString creates a string description of a pkix.Name object.

NewPEMCertPool creates a new, empty, instance of PEMCertPool.

OIDForStandardExtension indicates whether oid identifies a standard extension.

OIDInExtensions checks whether the extension identified by oid is present in extensions and returns how many times it occurs together with an indication of whether any of them are marked critical.

OtherNameToString creates a string description of an x509.OtherName object.

ParseSCTsFromCertificate parses any SCTs that are embedded in the certificate provided.

ParseSCTsFromSCTList parses each of the SCTs contained within an SCT list.

ReadFileOrURL returns the data from a target which may be either a filename or an HTTP(S) URL.

ReadPossiblePEMFile loads data from a file which may be in DER format or may be in PEM format (with the given blockname).

ReadPossiblePEMURL attempts to determine if the given target is a local file or a URL, and return the file contents regardless.

RevocationReasonToString generates a string describing a revocation reason code.

PEMCertPool is a wrapper / extension to x509.CertPool.