X.509

A PHP library for X.509 public key certificates, attribute certificates, certification requests and certification path validation.

Introduction

This library provides a pure PHP implementation of X.509 certificates. The class hierarchy adapts to the ASN.1 types, which makes it easy to use corresponding RFC's as a reference documentation.

Features

• X.509 certificates (RFC 5280)
  • Certificate decoding and encoding
  • Certificate signing
• Certification requests (PKCS #10)
  • CSR decoding and encoding
• Certification path
  • Path building
  • Path validation
• Attribute certificates (RFC 5755)
  • AC decoding and encoding
  • AC signing

Requirements

• PHP >=7.2
• gmp
• sop/asn1
• sop/x501
• sop/crypto-types
• sop/crypto-bridge
• sop/crypto-encoding

Installation

This library is available on Packagist.

composer require sop/x509

Code examples

Examples are located in /examples directory.

• Create a CA certificate
• Create a CSR
• Issue a certificate
• Validate a certification path

License

This project is licensed under the MIT License.