{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Validates X.509 certificate paths with support for revocation checks (CRL and OCSP), point-in-time validation, and policy constraints.","skillfed_tags":["pki","x509","revocation-checking"],"use_cases":["Validate certificate chains in PKI-aware applications before trusting certificates for TLS or code signing","Perform revocation checks via CRL or OCSP to ensure certificates have not been compromised or revoked","Validate certificates as they were at a specific historical date for compliance or forensic purposes","Enforce certificate policy constraints and name constraints in security-critical workflows","Build certificate path validation into document signing or verification tools (e.g., PDF signing)"],"what_it_does":"pyhanko-certvalidator is a Python library for validating X.509 certificate chains, originally forked from wbond/certvalidator but significantly evolved for use in pyHanko. It performs comprehensive path validation including signature verification (RSA, DSA, ECDSA, EdDSA), name chaining, validity date checks, and extension processing. The library supports revocation verification through both CRL (including indirect and delta CRLs) and OCSP (including delegated responders), with configurable failure modes and response caching. It can validate certificates at a specific point in time, enforce name constraints, and handle attribute certificates.\n\nThe library has been refactored to use asynchronous I/O throughout, though synchronous wrappers remain available for backward compatibility. It depends on asn1crypto, cryptography, oscrypto, uritools, and requests. The default OCSP and CRL clients use requests for HTTP operations, with an optional aiohttp-based implementation available for more efficient async use. Bug reports and questions are routed through the pyHanko project rather than this repository directly.","worth_installing":"Yes. The package is actively maintained, has no known vulnerabilities, supports current Python versions, and provides comprehensive X.509 validation with low install friction. Suitable for production use in PKI-aware applications. Note that the synchronous API is deprecated in favor of async equivalents, so new code should plan for async patterns."},"id":"pyhanko-certvalidator","links":{"html":"https://skillfed.io/packages/pyhanko-certvalidator","md":"https://skillfed.io/packages/pyhanko-certvalidator.md","pypi":"https://pypi.org/project/pyhanko-certvalidator/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-25","license_spdx":"MIT","license_treatment":"permissive","name":"pyhanko-certvalidator","python_support":"supports_current","summary":"Validates X.509 certificates and paths; forked from wbond/certvalidator"},"popularity":{"monthly_downloads":6294287,"position":1937,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.31.4"}