FluentCertificates 0.8.1-ci0028

This is a prerelease version of FluentCertificates.
There is a newer version of this package available.
See the version list below for details.
dotnet add package FluentCertificates --version 0.8.1-ci0028
                    
NuGet\Install-Package FluentCertificates -Version 0.8.1-ci0028
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="FluentCertificates" Version="0.8.1-ci0028" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="FluentCertificates" Version="0.8.1-ci0028" />
                    
Directory.Packages.props
<PackageReference Include="FluentCertificates" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add FluentCertificates --version 0.8.1-ci0028
                    
#r "nuget: FluentCertificates, 0.8.1-ci0028"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#addin nuget:?package=FluentCertificates&version=0.8.1-ci0028&prerelease
                    
Install FluentCertificates as a Cake Addin
#tool nuget:?package=FluentCertificates&version=0.8.1-ci0028&prerelease
                    
Install FluentCertificates as a Cake Tool

📖 FluentCertificates Overview

⚠️ Note: while version numbers are v0.x.y, this software is under initial development and there'll be breaking-changes in its API from version to version.

GitHub license NuGet Stats Build & Publish

FluentCertificates is a library using the Immutable Fluent Builder pattern for easily creating, finding and exporting certificates. Makes it simple to generate your own certificate chains, or just stand-alone self-signed certificates.

This project is published in several NuGet packages:

Unfortunately documentation is incomplete. You may find more examples within the project's unit tests.

CertificateBuilder examples

CertificateBuilder requires the FluentCertificates.Builder package and is found under the FluentCertificates namespace.

The absolute minimum needed to create a certificate (although it may not be a very useful one):

using var cert = new CertificateBuilder().Create();

Create a CertificateRequest for signing, exporting and passing to a 3rd party CA:

//A public & private keypair must be created first, outside of the CertificateBuilder, otherwise you'd have no way to retrieve the private-key used for the new CertificateRequest object
using var keys = RSA.Create();

//Creating a CertificateRequest
var request = new CertificateBuilder()
    .SetUsage(CertificateUsage.Server)
    .SetSubject(b => b.SetCommonName("*.fake.domain"))
    .SetDnsNames("*.fake.domain", "fake.domain")
    .SetKeyPair(keys)
    .CreateCertificateRequest();

Build a self-signed web server certificate:

//Using a fluent style
using var cert = new CertificateBuilder()
    .SetUsage(CertificateUsage.Server)
    .SetFriendlyName("Example self-signed web-server certificate")
    .SetSubject(b => b.SetCommonName("*.fake.domain"))
    .SetDnsNames("*.fake.domain", "fake.domain")
    .SetNotAfter(DateTimeOffset.UtcNow.AddMonths(1))
    .Create();

//And just to demonstrate using object initializers (I'll use fluent style from now on though)
using var builder = new CertificateBuilder() {
    Usage = CertificateUsage.Server,
    FriendlyName = "Example self-signed web-server certificate",
    Subject = new X500NameBuilder().SetCommonName("*.fake.domain"),
    DnsNames = new[] { "*.fake.domain", "fake.domain" },
    NotAfter = DateTimeOffset.UtcNow.AddMonths(1)
};
var cert = builder.Create();

Build a CA (certificate authority):

//A CA's expiry date must be later than that of any certificates it will issue
using var issuer = new CertificateBuilder()
    .SetUsage(CertificateUsage.CA)
    .SetFriendlyName("Example root CA")
    .SetSubject(b => b.SetCommonName("Example root CA"))
    .SetNotAfter(DateTimeOffset.UtcNow.AddYears(100))
    .Create();

Build a client-auth certificate signed by a CA:

//Note: the 'issuer' certificate used must have a private-key attached in order to sign this new certificate
using var cert = new CertificateBuilder()
    .SetUsage(CertificateUsage.Client)
    .SetFriendlyName("Example client-auth certificate")
    .SetSubject(b => b.SetCommonName("User: Michael"))
    .SetNotAfter(DateTimeOffset.UtcNow.AddYears(1))
    .SetIssuer(issuer)
    .Create();

Advanced: Build a certificate with customized extensions:

using var cert = new CertificateBuilder()
    .SetFriendlyName("Example certificate with customized extensions")
    .SetSubject(b => b.SetCommonName("Example certificate with customized extensions"))
    .AddExtension(new X509BasicConstraintsExtension(false, false, 0, true))
    .AddExtension(new X509KeyUsageExtension(X509KeyUsageFlags.DigitalSignature | X509KeyUsageFlags.KeyEncipherment | X509KeyUsageFlags.DataEncipherment, true))
    .AddExtension(new X509EnhancedKeyUsageExtension(new OidCollection { new(KeyPurposeID.AnyExtendedKeyUsage.Id) }, false))
    .SetIssuer(issuer)
    .Create();

CertificateFinder examples

CertificateFinder requires the FluentCertificates.Finder package and is found under the FluentCertificates namespace.

TODO: document this


X500NameBuilder examples

X500NameBuilder requires the FluentCertificates.Builder package and is found under the FluentCertificates namespace.

TODO: document this; see unit tests for more examples


X509Certificate2 extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

TODO: document these; see unit tests for more examples

Extension-Method Description
BuildChain
ExportAsCert
ExportAsPkcs12
ExportAsPkcs7
ExportAsPem
ToPemString
ToBase64String
GetPrivateKey
GetSignatureData
GetTbsData
IsValidNow
IsValid
IsSelfSigned
IsIssuedBy

X509Chain extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

TODO: document these

Extension-Method Description
ToCollection
ToEnumerable
ExportAsPkcs7
ExportAsPkcs12
ExportAsPem
ToPemString

X509Certificate2Collection extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

TODO: document these

Extension-Method Description
ToEnumerable
ExportAsPkcs7
ExportAsPkcs12
ExportAsPem
ToPemString

IEnumerable<X509Certificate2> extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

TODO: document these

Extension-Method Description
ToCollection
FilterPrivateKeys
ExportAsPkcs7
ExportAsPkcs12
ExportAsPem
ToPemString

AsymmetricAlgorithm extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

TODO: document these

Extension-Method Description
ToPrivateKeyPemString
ToPublicKeyPemString
ExportAsPrivateKeyPem
ExportAsPublicKeyPem

CertificateRequest extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

Extension-Method Description
ToPemString() Exports the CertificateRequest to a PEM string.
ExportAsPem(string path) Exports the CertificateRequest to the specified PEM file.
ExportAsPem(TextWriter writer) Exports the CertificateRequest in PEM format to the given TextWriter.
ConvertToBouncyCastle() Converts the CertificateRequest to a BouncyCastle Pkcs10CertificationRequest

X509Extension extension-methods

These extension methods require the FluentCertificates.Builder package and are found under the FluentCertificates namespace.

Extension-Method Description
dnExtension.ConvertToBouncyCastle() Converts a DotNet X509Extension to a BouncyCastle X509Extension.
bcExtension.ConvertToDotNet(string oid) Converts a BouncyCastle X509Extension to a DotNet X509Extension. A DotNet X509Extension includes an OID, but a BouncyCastle one doesn't, therefore one must be supplied in the parameters here.
bcExtension.ConvertToDotNet(DerObjectIdentifier oid) Converts a BouncyCastle X509Extension to a DotNet X509Extension. A DotNet X509Extension includes an OID, but a BouncyCastle one doesn't, therefore one must be supplied in the parameters here.
Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 was computed.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 was computed.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
.NET Core netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard2.1 is compatible. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last updated
0.11.0 98 5/30/2025
0.10.1-ci0019 101 5/29/2025
0.10.1-ci0018 103 5/29/2025
0.10.1-ci0017 102 5/29/2025
0.10.1-ci0016 105 5/29/2025
0.10.1-ci0010 99 5/29/2025
0.10.1-ci0008 104 5/28/2025
0.10.1-ci0001 87 11/29/2024
0.10.0 243 11/28/2024
0.9.2-ci0009 86 11/28/2024
0.9.2-ci0008 84 11/28/2024
0.9.2-ci0006 75 11/27/2024
0.9.2-ci0004 80 11/27/2024
0.9.2-ci0002 112 2/19/2024
0.9.1 479 8/11/2023
0.9.1-ci0017 152 8/11/2023
0.9.1-ci0007 155 8/11/2023
0.9.1-ci0006 173 8/11/2023
0.9.0 200 8/10/2023
0.8.1-ci0031 150 8/10/2023
0.8.1-ci0028 148 8/2/2023
0.8.1-ci0027 143 8/2/2023
0.8.1-ci0025 148 8/2/2023
0.8.1-ci0020 165 8/1/2023
0.8.1-ci0018 137 8/1/2023
0.8.1-ci0016 145 8/1/2023
0.8.0 497 7/7/2022
0.7.2-ci0010 210 7/7/2022
0.7.2-ci0002 203 7/6/2022
0.7.2-ci0001 188 7/6/2022
0.7.1 443 6/24/2022
0.7.1-ci0001 183 6/24/2022
0.7.0 448 6/24/2022
0.6.1-ci0002 205 6/24/2022
0.6.1-ci0001 184 6/24/2022
0.6.0 454 6/23/2022
0.5.5-ci0009 182 6/23/2022
0.5.5-ci0008 182 6/23/2022
0.5.5-ci0007 194 6/23/2022
0.5.5-ci0006 198 6/23/2022
0.5.5-ci0005 182 6/23/2022
0.5.5-ci0004 203 6/21/2022
0.5.4 435 6/20/2022
0.5.4-ci0002 183 6/20/2022
0.5.3 438 6/20/2022
0.5.3-ci0005 192 6/20/2022
0.5.3-ci0004 185 6/20/2022
0.5.3-ci0003 168 6/20/2022
0.5.2 462 6/18/2022
0.5.2-ci0001 187 6/18/2022
0.5.1 455 6/17/2022
0.5.1-ci0001 184 6/17/2022
0.5.0 429 6/17/2022
0.4.2-ci0022 192 6/17/2022
0.4.2-ci0021 200 6/17/2022
0.4.2-ci0020 191 6/17/2022
0.4.2-ci0018 192 6/17/2022
0.4.2-ci0014 193 6/16/2022
0.4.2-ci0013 198 6/16/2022
0.4.2-ci0012 211 6/16/2022
0.4.2-ci0011 195 6/16/2022
0.4.2-ci0010 174 6/16/2022
0.4.2-ci0009 197 6/16/2022
0.4.2-ci0007 180 6/16/2022
0.4.2-ci0003 200 6/15/2022
0.4.2-ci0002 217 6/15/2022
0.4.2-ci0001 208 6/10/2022
0.4.1 447 6/10/2022
0.4.1-ci0008 179 6/10/2022
0.4.1-ci0007 192 6/10/2022
0.4.1-ci0006 205 6/10/2022
0.4.1-ci0005 198 6/10/2022
0.4.1-ci0004 193 6/10/2022
0.4.1-ci0003 201 6/10/2022
0.4.1-ci0002 199 6/8/2022
0.4.1-ci0001 188 6/8/2022
0.4.0 462 6/2/2022
0.3.3-ci0001 206 6/2/2022
0.3.2 448 6/2/2022
0.3.2-ci0002 204 5/31/2022
0.3.2-ci.1 154 5/30/2022