P7B

Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.

PKCS#7 Certificate Bundle Preview.

At a glance

How much Poka reads

B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.

Confidence: high (the reviewer read the code and a test that proves the claim). Basis: Reviewed 2026-10-26: read parsers/poka-p7b/src/main.rs (675 lines) and plugin.json. The unit test parses_sample_p7b reads the corpus sample.p7b. Covers .p7b. The tree decodes PEM or DER and lists every certificate with subject and issuer (CN, O), serial, validity, key algorithm and size, signature algorithm, CA flag and its role (root, intermediate or leaf), with the format, count and content type. Judgement: B2: every certificate in the bundle is decoded; the gaps are extensions and verification.

What Poka does not read

• The chain is not verified and signatures are not checked
• Certificate extensions other than basic constraints (SANs, key usage, policies) are not shown
• CRLs in the bundle are not decoded
• Only the first 200 certificates are listed

Libraries

Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.

• der-parser (used; MIT OR Apache-2.0; Rust)
• x509-parser (used; MIT OR Apache-2.0; Rust)
• synta (synta-certificate) (candidate; Apache-2.0 OR MIT; Rust; https://docs.rs/crate/synta/0.3.3) — ASN.1 DER/BER library; lists PKCS#7 SignedData certificate extraction; repo at codeberg.org/abbra/synta
• cms (RustCrypto/formats) (candidate; Apache-2.0 OR MIT; Rust; https://github.com/RustCrypto/formats/tree/master/cms) — Pure Rust CMS (RFC 5652) types; CMS is based on PKCS#7, but .p7b certificate-bundle handling not confirmed on the page

Sources

• parsers/poka-p7b/src/main.rs
• parsers/poka-p7b/plugin.json