Description

Parses pkcs7 as a DER-encoded PKCS#7 message and returns a vector containing each signer certificate as a PEM-encoded string. Useful for extracting and validating certificate chains from signed S/MIME messages, code-signing payloads, and timestamp tokens without going through the file system.

Raises SQL state 22023 (CR014) if the input is not a valid PKCS#7 file. Returns SQL NULL if the PKCS#7 message parses but contains no signer certificates.

See Also

pem_certificates_to_array, get_certificate_info, x509_certificate_verify, asn1_to_xml