Skip to content


Folders and files

Last commit message
Last commit date

Latest commit


Repository files navigation

X.509 - Public Key Infrastructure purely in OCaml

%%VERSION%% X.509 is a public key infrastructure used mostly on the Internet. It consists of certificates which include public keys and identifiers, signed by an authority. Authorities must be exchanged over a second channel to establish the trust relationship. This library implements most parts of RFC5280 and RFC6125. The Public Key Cryptography Standards (PKCS) defines encoding and decoding in ASN.1 DER and PEM format, which is also implemented by this library - namely PKCS 1, PKCS 7, PKCS 8, PKCS 9 and PKCS 10.

Read further and our Usenix Security 2015 paper.


API documentation


opam install x509 will install this library.