hx509_cert(3)

📦

version 7.8.0 · 3 versions

7.8.0 · alpine 3.22, alpine 3.23, alpine 3.24, epel 10, epel 9, fedora 43, fedora 44 (latest)
14.5 · freebsd 14.5, nixpkgs unstable
11.0 · nixpkgs unstable

, in alpine 3.22, alpine 3.23, alpine 3.24, epel 10, epel 9, fedora 43, fedora 44

💖 hx509_cert — the `hx509_cert(3)` glow-up 💖

okay bestie so this is the manual for the hx509 certificate functions from the Heimdal x509 library. yes it's a big one. yes it's gonna be a lot. but we're doing this together and honestly? it's giving "essential reading". let's go 🦋

✨ NAME ✨

hx509_cert — hx509 certificate functions 💅

🌸 SYNOPSIS 🌸

the function squad (yes, all of them, we don't skip)

hx509_cert hx509_cert_init (hx509_context context, const Certificate *c, heim_error_t *error)
hx509_cert hx509_cert_init_data (hx509_context context, const void *ptr, size_t len, heim_error_t *error)
void hx509_cert_free (hx509_cert cert)
hx509_cert hx509_cert_ref (hx509_cert cert)
void hx509_verify_ctx_f_allow_default_trustanchors (hx509_verify_ctx ctx, int boolean)
int hx509_cert_find_subjectAltName_otherName (hx509_context context, hx509_cert cert, const heim_oid *oid, hx509_octet_string_list *list)
int hx509_cert_cmp (hx509_cert p, hx509_cert q)
int hx509_cert_get_issuer (hx509_cert p, hx509_name *name)
int hx509_cert_get_subject (hx509_cert p, hx509_name *name)
int hx509_cert_get_base_subject (hx509_context context, hx509_cert c, hx509_name *name)
int hx509_cert_get_serialnumber (hx509_cert p, heim_integer *i)
time_t hx509_cert_get_notBefore (hx509_cert p)
time_t hx509_cert_get_notAfter (hx509_cert p)
int hx509_cert_get_SPKI (hx509_context context, hx509_cert p, SubjectPublicKeyInfo *spki)
int hx509_cert_get_SPKI_AlgorithmIdentifier (hx509_context context, hx509_cert p, AlgorithmIdentifier *alg)
int hx509_cert_get_issuer_unique_id (hx509_context context, hx509_cert p, heim_bit_string *issuer)
int hx509_cert_get_subject_unique_id (hx509_context context, hx509_cert p, heim_bit_string *subject)
int hx509_verify_hostname (hx509_context context, const hx509_cert cert, int flags, hx509_hostname_type type, const char *hostname, const struct sockaddr *sa, int sa_size)
hx509_cert_attribute hx509_cert_get_attribute (hx509_cert cert, const heim_oid *oid)
int hx509_cert_set_friendly_name (hx509_cert cert, const char *name)
const char * hx509_cert_get_friendly_name (hx509_cert cert)
int hx509_query_alloc (hx509_context context, hx509_query **q)
void hx509_query_match_option (hx509_query *q, hx509_query_option option)
int hx509_query_match_issuer_serial (hx509_query *q, const Name *issuer, const heim_integer *serialNumber)
int hx509_query_match_friendly_name (hx509_query *q, const char *name)
int hx509_query_match_eku (hx509_query *q, const heim_oid *eku)
int hx509_query_match_cmp_func (hx509_query *q, int(*func)(hx509_context, hx509_cert, void *), void *ctx)
void hx509_query_free (hx509_context context, hx509_query *q)
void hx509_query_statistic_file (hx509_context context, const char *fn)
void hx509_query_unparse_stats (hx509_context context, int printtype, FILE *out)
int hx509_cert_check_eku (hx509_context context, hx509_cert cert, const heim_oid *eku, int allow_any_eku)
int hx509_cert_binary (hx509_context context, hx509_cert c, heim_octet_string *os)
int hx509_print_cert (hx509_context context, hx509_cert cert, FILE *out)

🎀 Detailed Description 🎀

ok so if you want the whole lore — descriptions AND examples — go peek at The basic certificate. that's where the story starts, bestie. 📖✨

👑 Function Documentation 👑

`int hx509_cert_binary (hx509_context context, hx509_cert c, heim_octet_string * os)`

takes your hx509 certificate and encodes it as a DER encoded binary. it's giving "glow up into bytes". 🔥

Parameters

context — a hx509 context.
c — the certificate to encode.
os — the encoded certificate. heads up: it gets set to NULL, 0 if there's an error. and bestie, you gotta free os->data yourself with hx509_xfree().

Returns

an hx509 error code, peep hx509_get_error_string() for the deets.

`int hx509_cert_check_eku (hx509_context context, hx509_cert cert, const heim_oid * eku, int allow_any_eku)`

vibe-checks the extended key usage on the hx509 certificate. 👀

Parameters

context — a hx509 context.
cert — a hx509 context. (yes it says context, no we're not arguing with the original)
eku — the EKU to check for.
allow_any_eku — if the any EKU is set, let that count as a substitute.

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_cmp (hx509_cert p, hx509_cert q)`

compares two hx509 certificate objects. super handy for sorting, no cap. 📊

Parameters

p — a hx509 certificate object.
q — a hx509 certificate object.

Returns

0 if the objects are the same, > 0 if p is 'larger' than q, < 0 if p is 'smaller' than q.

`int hx509_cert_find_subjectAltName_otherName (hx509_context context, hx509_cert cert, const heim_oid * oid, hx509_octet_string_list * list)`

returns a list of subjectAltNames specified by oid in the certificate. On error the

the list of octet strings it hands back should be freed with hx509_free_octet_string_list(). don't forget, bestie, or that's a leak and we don't do leaks here 🫶

Parameters

context — a hx509 context.
cert — a hx509 certificate object.
oid — an oid to for SubjectAltName.
list — list of matching SubjectAltName.

Returns

an hx509 error code, see hx509_get_error_string().

`void hx509_cert_free (hx509_cert cert)`

frees a reference to the hx509 certificate object. when the refcounter hits 0, the object itself gets freed — it's giving "last one out turns off the lights". 💀 and yes, passing in NULL is totally allowed, we're not judging.

Parameters

cert — the cert to free.

`hx509_cert_attribute hx509_cert_get_attribute (hx509_cert cert, const heim_oid * oid)`

grabs an external attribute for the certificate — think friendly name, id, that kind of thing. 🏷️

Parameters

cert — hx509 certificate object to search
oid — an oid to search for.

Returns

an hx509_cert_attribute, which is only valid as long as the certificate is referenced.

`int hx509_cert_get_base_subject (hx509_context context, hx509_cert c, hx509_name * name)`

returns the name of the base subject of the hx509 certificate. if the certificate is a verified proxy certificate, this gives you the base certificate (aka the root of the proxy chain). 🧚 and if the proxy certificate is NOT verified with the base certificate, you get HX509_PROXY_CERTIFICATE_NOT_CANONICALIZED back. so like, no verified chain, no base subject. periodt.

Parameters

context — a hx509 context.
c — a hx509 certificate object.
name — a pointer to a hx509 name, should be freed by hx509_name_free(). See also hx509_cert_get_subject().

Returns

an hx509 error code, see hx509_get_error_string().

`const char* hx509_cert_get_friendly_name (hx509_cert cert)`

gets the friendly name of the certificate. yes it's literally called friendly name, we love a wholesome API 🥹

Parameters

cert — cert to get the friendly name from.

Returns

a friendly name, or NULL if there is. the friendly name is only valid as long as the certificate is referenced.

`int hx509_cert_get_issuer (hx509_cert p, hx509_name * name)`

returns the name of the issuer of the hx509 certificate.

Parameters

p — a hx509 certificate object.
name — a pointer to a hx509 name, should be freed by hx509_name_free().

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_get_issuer_unique_id (hx509_context context, hx509_cert p, heim_bit_string * issuer)`

gets a copy of the Issuer Unique ID. 💅

Parameters

context — a hx509_context
p — a hx509 certificate
issuer — the issuer id returned, free with der_free_bit_string()

Returns

an hx509 error code, see hx509_get_error_string(). the error code HX509_EXTENSION_NOT_FOUND is returned if the certificate doesn't have a issuerUniqueID.

`time_t hx509_cert_get_notAfter (hx509_cert p)`

gets the notAfter time of the certificate. aka when it stops being valid, aka its expiration era. 😭

Parameters

p — a hx509 certificate object.

Returns

return not after time.

`time_t hx509_cert_get_notBefore (hx509_cert p)`

gets the notBefore time of the certificate. aka when it starts being valid, its birthday if you will 🎂

Parameters

p — a hx509 certificate object.

Returns

return not before time

`int hx509_cert_get_serialnumber (hx509_cert p, heim_integer * i)`

gets the serial number of the certificate.

Parameters

p — a hx509 certificate object.
i — serial number, should be freed ith der_free_heim_integer().

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_get_SPKI (hx509_context context, hx509_cert p, SubjectPublicKeyInfo * spki)`

gets the SubjectPublicKeyInfo structure from the hx509 certificate. it's giving "the actual key material reveal" 🔑✨

Parameters

context — a hx509 context.
p — a hx509 certificate object.
spki — SubjectPublicKeyInfo, should be freed with free_SubjectPublicKeyInfo().

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_get_SPKI_AlgorithmIdentifier (hx509_context context, hx509_cert p, AlgorithmIdentifier * alg)`

gets the AlgorithmIdentifier from the hx509 certificate. 🧬

Parameters

context — a hx509 context.
p — a hx509 certificate object.
alg — AlgorithmIdentifier, should be freed with free_AlgorithmIdentifier(). the algorithmidentifier is typicly rsaEncryption, or id-ecPublicKey, or some other public key mechanism.

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_get_subject (hx509_cert p, hx509_name * name)`

returns the name of the subject of the hx509 certificate.

Parameters

p — a hx509 certificate object.
name — a pointer to a hx509 name, should be freed by hx509_name_free(). See also hx509_cert_get_base_subject().

Returns

an hx509 error code, see hx509_get_error_string().

`int hx509_cert_get_subject_unique_id (hx509_context context, hx509_cert p, heim_bit_string * subject)`

gets a copy of the Subect Unique ID. 🪪

Parameters

context — a hx509_context
p — a hx509 certificate
subject — the subject id returned, free with der_free_bit_string()

Returns

an hx509 error code, see hx509_get_error_string(). the error code HX509_EXTENSION_NOT_FOUND is returned if the certificate doesn't have a subjectUniqueID.

`hx509_cert hx509_cert_init (hx509_context context, const Certificate * c, heim_error_t * error)`

allocates and inits an hx509 certificate object from the decoded certificate c. the origin story fr fr. 🌱

Parameters

context — A hx509 context.
c —
error —

Returns

returns an hx509 certificate

`hx509_cert hx509_cert_init_data (hx509_context context, const void * ptr, size_t len, heim_error_t * error)`

literally just like hx509_cert_init(), except instead of a decoded certificate you hand it a pointer and a length to a memory region holding a DER/BER encoded certificate. 📦

⚠️ if that memory region contains the certificate plus anything extra, the function fails with HX509_EXTRA_DATA_AFTER_STRUCTURE. no bonus bytes allowed, bestie, it's strict like that.

Parameters

context — A hx509 context.
ptr — pointer to memory region containing encoded certificate.
len — length of memory region.
error — possibly returns an error

Returns

an hx509 certificate

`hx509_cert hx509_cert_ref (hx509_cert cert)`

adds a reference to a hx509 certificate object. refcounting, our beloved 🫶

Parameters

cert — a pointer to an hx509 certificate object.

Returns

the same object as is passed in.

`int hx509_cert_set_friendly_name (hx509_cert cert, const char * name)`

sets the friendly name on the certificate. giving your cert a little nickname, iconic behavior. 🏷️✨

ok bestie we're not done yet — this is only part one. more of the function fam is coming right up, don't go anywhere 💜

Parameters 💖

cert — the certificate you're putting the friendly name on. That's the one.
name — the friendly name. Adorable. 🌸

Returns

An hx509 error code, and if you're confused about it, go read hx509_get_error_string(). She'll tell you what's up.

✨ **`int hx509_print_cert (hx509_context context, hx509_cert cert, FILE * out)`**

Prints out a simple little representation of a certificate. Nothing fancy, just the basics, but it gets the job done. 💅

Parameters

context — an hx509 context. Can be NULL, she's chill like that.
cert — the certificate you wanna print.
out — the stdio output stream. If it's NULL, then stdout is used, so it just goes straight to your terminal, periodt.

Returns

An hx509 error code.

🌈 `int hx509_query_alloc (hx509_context context, hx509_query q)`**

Allocates a query controller. When you're done with it, free it with hx509_query_free(). Don't leave it lying around, bestie, that's a memory leak and we don't do those. 🫶

Parameters

context — an hx509 context.
q — return pointer to a hx509_query.

Returns

An hx509 error code, see hx509_get_error_string().

🦋 **`void hx509_query_free (hx509_context context, hx509_query * q)`**

Frees the query controller. Cleanup era. 🧹

Parameters

context — an hx509 context.
q — a pointer to the query controller.

👑 **`int hx509_query_match_cmp_func (hx509_query * q, int()(hx509_context, hx509_cert, void ) func, void * ctx)`**

Sets the query controller to match using a specific match function. You bring your own logic, she respects that.

Parameters

q — a hx509 query controller.
func — the function to use for matching. If this argument is NULL, the match function gets removed. Gone. Not invited back. 💀
ctx — context passed to the function.

Returns

An hx509 error code, see hx509_get_error_string().

🎀 **`int hx509_query_match_eku (hx509_query * q, const heim_oid * eku)`**

Sets the query controller to require one specific EKU (extended key usage). Heads up: any previous EKU matching is overwitten — yes, overwritten, the original spelling said "overwitten" and we keep the lore — so it's one at a time, she's monogamous about EKUs. If NULL is passed in as the eku, the EKU requirement is reset. No EKU, no problem. ✨

Parameters

q — a hx509 query controller.
eku — an EKU to match on.

Returns

An hx509 error code, see hx509_get_error_string().

💜 **`int hx509_query_match_friendly_name (hx509_query * q, const char * name)`**

Sets the query controller to match on a friendly name. It's giving "find me by my cute nickname". 🥰

Parameters

q — a hx509 query controller.
name — a friendly name to match on.

Returns

An hx509 error code, see hx509_get_error_string().

⭐ **`int hx509_query_match_issuer_serial (hx509_query * q, const Name * issuer, const heim_integer * serialNumber)`**

Sets the issuer and serial number to match in the query controller. The function makes copies of the issuer and the serial number, so you don't gotta worry about your originals getting snatched. 🔥

Parameters

q — a hx509 query controller.
issuer — issuer to search for.
serialNumber — the serialNumber of the issuer.

Returns

An hx509 error code, see hx509_get_error_string().

🍓 **`void hx509_query_match_option (hx509_query * q, hx509_query_option option)`**

Sets the match options for the hx509 query controller.

Parameters

q — query controller.
option — options to control the query controller.

Returns

An hx509 error code, see hx509_get_error_string(). (Yeah, it's a void function with a Returns section. The docs said what they said, we're not editing the canon. 🙈)

🌸 **`void hx509_query_statistic_file (hx509_context context, const char * fn)`**

Sets a statistic file for the query statistics. Numbers girlies, this one's for you.

Parameters

context — an hx509 context.
fn — statistics file name.

🧚 **`void hx509_query_unparse_stats (hx509_context context, int printtype, FILE * out)`**

Unparses the statistics file and prints the result on a FILE descriptor. Reverse engineering the stats, iconic behavior.

Parameters

context — an hx509 context.
printtype — type to print.
out — the FILE to write the data on.

🔥 `void hx509_verify_ctx_f_allow_default_trustanchors (hx509_verify_ctx ctx, int boolean)`

Allows using the operating system's builtin trust anchors if no other trust anchors are configured. Like, if nobody set anything up, fine, we'll use the OS ones. Backup plan energy. 🫶

Parameters

ctx — a verification context.
boolean — if non-zero, use the operating system's builtin trust anchors.

Returns

An hx509 error code, see hx509_get_error_string(). (Also a void function with a Returns section. We don't question the ancients.)

🌟 **`int hx509_verify_hostname (hx509_context context, const hx509_cert cert, int flags, hx509_hostname_type type, const char * hostname, const struct sockaddr * sa, int sa_size)`**

Verifies that the certificate is actually allowed to be used for the hostname and the address. This is the vibe check of the whole page, ngl.

Parameters

context — an hx509 context.
cert — the certificate to match with.
flags — flags to modify the behavior:
- HX509_VHN_F_ALLOW_NO_MATCH — no match is ok.
type — type of hostname:
- HX509_HN_HOSTNAME — for plain hostname.
- HX509_HN_DNSSRV — for DNS SRV names.
hostname — the hostname to check.
sa — address of the host.
sa_size — length of address.

Returns

An hx509 error code, see hx509_get_error_string().

✍️ Author

Generated automatically by Doxygen for Heimdal x509 library from the source code. Not a human, not a girlie, just a doc generator doing its little thing. 🎀

That's the whole page, bestie — no cap. 💖

This one's from the Heimdal x509 library docs, Version 7.8.0, dated Tue Nov 15 2022, and it lives under hx509_cert(3). Go forth and verify some hostnames. Slay. 👑✨🦋

📦 where this page comes from

alpine 3.22: heimdal-doc 7.8.0-r4 · BSD-3-Clause
alpine 3.23: heimdal-doc 7.8.0-r5 · BSD-3-Clause
alpine 3.24: heimdal-doc 7.8.0-r5 · BSD-3-Clause
epel 10: heimdal-devel 7.8.0-26.el10_2 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
epel 9: heimdal-devel 7.8.0-5.el9 · BSD and MIT
fedora 43: heimdal-devel 7.8.0-26.fc43 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
fedora 43: heimdal-devel 7.8.0-26.fc43 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
fedora 44: heimdal-devel 7.8.0-26.fc43 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
fedora 44: heimdal-devel 7.8.0-26.fc43 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
fedora 44: heimdal-devel 7.8.0-28.fc44 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
fedora 44: heimdal-devel 7.8.0-28.fc44 · BSD-2-Clause AND BSD-3-Clause AND HPND-export-US AND HPND-export2-US AND LicenseRef-Fedora-Public-Domain
💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash on 2026-10-14: a language model's rewrite of the original, under its terms

hx509_cert(3)

💖 hx509_cert — the hx509_cert(3) glow-up 💖

✨ NAME ✨

🌸 SYNOPSIS 🌸

the function squad (yes, all of them, we don't skip)

🎀 Detailed Description 🎀

👑 Function Documentation 👑

int hx509_cert_binary (hx509_context context, hx509_cert c, heim_octet_string * os)

int hx509_cert_check_eku (hx509_context context, hx509_cert cert, const heim_oid * eku, int allow_any_eku)

int hx509_cert_cmp (hx509_cert p, hx509_cert q)

int hx509_cert_find_subjectAltName_otherName (hx509_context context, hx509_cert cert, const heim_oid * oid, hx509_octet_string_list * list)

void hx509_cert_free (hx509_cert cert)

hx509_cert_attribute hx509_cert_get_attribute (hx509_cert cert, const heim_oid * oid)

int hx509_cert_get_base_subject (hx509_context context, hx509_cert c, hx509_name * name)

const char* hx509_cert_get_friendly_name (hx509_cert cert)

int hx509_cert_get_issuer (hx509_cert p, hx509_name * name)

int hx509_cert_get_issuer_unique_id (hx509_context context, hx509_cert p, heim_bit_string * issuer)

time_t hx509_cert_get_notAfter (hx509_cert p)

time_t hx509_cert_get_notBefore (hx509_cert p)

int hx509_cert_get_serialnumber (hx509_cert p, heim_integer * i)

int hx509_cert_get_SPKI (hx509_context context, hx509_cert p, SubjectPublicKeyInfo * spki)

int hx509_cert_get_SPKI_AlgorithmIdentifier (hx509_context context, hx509_cert p, AlgorithmIdentifier * alg)

int hx509_cert_get_subject (hx509_cert p, hx509_name * name)

int hx509_cert_get_subject_unique_id (hx509_context context, hx509_cert p, heim_bit_string * subject)

hx509_cert hx509_cert_init (hx509_context context, const Certificate * c, heim_error_t * error)

hx509_cert hx509_cert_init_data (hx509_context context, const void * ptr, size_t len, heim_error_t * error)

hx509_cert hx509_cert_ref (hx509_cert cert)

int hx509_cert_set_friendly_name (hx509_cert cert, const char * name)

Parameters 💖

Returns

✨ int hx509_print_cert (hx509_context context, hx509_cert cert, FILE * out)

Parameters

Returns

🌈 int hx509_query_alloc (hx509_context context, hx509_query ** q)

Parameters

Returns

🦋 void hx509_query_free (hx509_context context, hx509_query * q)

Parameters

👑 int hx509_query_match_cmp_func (hx509_query * q, int(*)(hx509_context, hx509_cert, void *) func, void * ctx)

Parameters

Returns

🎀 int hx509_query_match_eku (hx509_query * q, const heim_oid * eku)

Parameters

Returns

💜 int hx509_query_match_friendly_name (hx509_query * q, const char * name)

Parameters

Returns

⭐ int hx509_query_match_issuer_serial (hx509_query * q, const Name * issuer, const heim_integer * serialNumber)

Parameters

Returns

🍓 void hx509_query_match_option (hx509_query * q, hx509_query_option option)

Parameters

Returns

🌸 void hx509_query_statistic_file (hx509_context context, const char * fn)

Parameters

🧚 void hx509_query_unparse_stats (hx509_context context, int printtype, FILE * out)

Parameters

🔥 void hx509_verify_ctx_f_allow_default_trustanchors (hx509_verify_ctx ctx, int boolean)

Parameters

Returns

🌟 int hx509_verify_hostname (hx509_context context, const hx509_cert cert, int flags, hx509_hostname_type type, const char * hostname, const struct sockaddr * sa, int sa_size)

Parameters

Returns

✍️ Author

💖 hx509_cert — the `hx509_cert(3)` glow-up 💖

`int hx509_cert_binary (hx509_context context, hx509_cert c, heim_octet_string * os)`

`int hx509_cert_check_eku (hx509_context context, hx509_cert cert, const heim_oid * eku, int allow_any_eku)`

`int hx509_cert_cmp (hx509_cert p, hx509_cert q)`

`int hx509_cert_find_subjectAltName_otherName (hx509_context context, hx509_cert cert, const heim_oid * oid, hx509_octet_string_list * list)`

`void hx509_cert_free (hx509_cert cert)`

`hx509_cert_attribute hx509_cert_get_attribute (hx509_cert cert, const heim_oid * oid)`

`int hx509_cert_get_base_subject (hx509_context context, hx509_cert c, hx509_name * name)`

`const char* hx509_cert_get_friendly_name (hx509_cert cert)`

`int hx509_cert_get_issuer (hx509_cert p, hx509_name * name)`

`int hx509_cert_get_issuer_unique_id (hx509_context context, hx509_cert p, heim_bit_string * issuer)`

`time_t hx509_cert_get_notAfter (hx509_cert p)`

`time_t hx509_cert_get_notBefore (hx509_cert p)`

`int hx509_cert_get_serialnumber (hx509_cert p, heim_integer * i)`

`int hx509_cert_get_SPKI (hx509_context context, hx509_cert p, SubjectPublicKeyInfo * spki)`

`int hx509_cert_get_SPKI_AlgorithmIdentifier (hx509_context context, hx509_cert p, AlgorithmIdentifier * alg)`

`int hx509_cert_get_subject (hx509_cert p, hx509_name * name)`

`int hx509_cert_get_subject_unique_id (hx509_context context, hx509_cert p, heim_bit_string * subject)`

`hx509_cert hx509_cert_init (hx509_context context, const Certificate * c, heim_error_t * error)`

`hx509_cert hx509_cert_init_data (hx509_context context, const void * ptr, size_t len, heim_error_t * error)`

`hx509_cert hx509_cert_ref (hx509_cert cert)`

`int hx509_cert_set_friendly_name (hx509_cert cert, const char * name)`

✨ **`int hx509_print_cert (hx509_context context, hx509_cert cert, FILE * out)`**

🌈 `int hx509_query_alloc (hx509_context context, hx509_query q)`**

🦋 **`void hx509_query_free (hx509_context context, hx509_query * q)`**

👑 **`int hx509_query_match_cmp_func (hx509_query * q, int()(hx509_context, hx509_cert, void ) func, void * ctx)`**

🎀 **`int hx509_query_match_eku (hx509_query * q, const heim_oid * eku)`**

💜 **`int hx509_query_match_friendly_name (hx509_query * q, const char * name)`**

⭐ **`int hx509_query_match_issuer_serial (hx509_query * q, const Name * issuer, const heim_integer * serialNumber)`**

🍓 **`void hx509_query_match_option (hx509_query * q, hx509_query_option option)`**

🌸 **`void hx509_query_statistic_file (hx509_context context, const char * fn)`**

🧚 **`void hx509_query_unparse_stats (hx509_context context, int printtype, FILE * out)`**

🔥 `void hx509_verify_ctx_f_allow_default_trustanchors (hx509_verify_ctx ctx, int boolean)`

🌟 **`int hx509_verify_hostname (hx509_context context, const hx509_cert cert, int flags, hx509_hostname_type type, const char * hostname, const struct sockaddr * sa, int sa_size)`**