pkijs.com
Every page in this reference is generated from the toolkit's own source comments. Zero npm runtime dependencies — the cryptography runs on Node's native node:crypto (classical and FIPS post-quantum), nothing vendored.
Constants
Functional scale helpers (`C.TIME.*`, `C.BYTES.*`) plus the toolkit version and shared codec limits.
ASN.1 / DER
Strict, fail-closed DER decode / encode with a navigable node tree and typed readers + builders.
WebCrypto
A zero-dep, PQC-first W3C WebCrypto (`SubtleCrypto`) engine over `node:crypto` — ML-DSA + SLH-DSA signatures alongside the full classical algorithm set.
Schema
One declarative schema engine; every PKI format (X.509, CRL, …) is a member composed on it. Detect-and-parse DER, or call a format directly.
X.509
Parse DER / PEM X.509 certificates into structured, validated fields with named algorithms, extensions, and real-`Date` validity windows.