verify

suspend fun verify(certificateChain: List<ByteArray>, tlsExtensionSctBytes: ByteArray? = null, ocspResponseSctBytes: ByteArray? = null): VerificationResult(source)

Verify certificate transparency compliance for a certificate chain.

Return

VerificationResult indicating whether the chain is CT-compliant.

Parameters

certificateChain

The certificate chain as a list of DER-encoded certificates. The first element is the leaf certificate, the second is the issuer, etc.

tlsExtensionSctBytes

Optional SCT bytes from the TLS extension (RFC 6962 §3.3).

ocspResponseSctBytes

Optional SCT bytes from an OCSP response (RFC 6962 §3.3).