Skip to content

cf.tls_client_auth.cert_rfc9440

cf.tls_client_auth.cert_rfc9440 String

The mTLS client certificate encoded as a Structured Fields Byte Sequence per RFC 9440.

Contains the DER-encoded, Base64-wrapped client leaf certificate formatted as an RFC 9440 Client-Cert HTTP header value. The value is a Structured Fields Byte Sequence (the Base64 data prefixed and suffixed by :).

This field is populated regardless of the certificate validation result. Before using this value, verify the certificate status by checking cf.tls_client_auth.cert_verified and cf.tls_client_auth.cert_revoked.

Returns "" if no client certificate was presented or if the encoded value exceeds the 10 KiB size limit. Refer to cf.tls_client_auth.cert_rfc9440_too_large to distinguish between these cases.

This field defaults to "" if the connection does not use mTLS authentication.

Example value:

":MIIBqDCCAU6g......:"
Categories:
  • Request
  • mTLS