What's Changed

• Spec compliance bug fixes by @cpu in #445
• Take advantage of stable ML-DSA in aws-lc-rs by @djc in #447

Previous versions generated DER that is strictly incompatible with the spec, writing an explicit false value for IsCa::ExplicitNoCa where this should be omitted (as it's the default).

What's Changed

• doc: amend description to point to CertificateParams for additional explanation by @mcr in #433
• Omit default cA flag value as required by spec by @djc in #444

What's Changed

• Fix incorrect identifier for ML-DSA signature algorithms by @DarkmatterVale in #412
• Upgrade yasna to 0.6 by @djc in #419
• Add support for is_ca in CSR Params by @5Dev24 in #420
• Add support for serializing BasicConstraints in CSR's by @5Dev24 in #422
• update key_pair to signing_key in README.md by @fakelozic in #427
• Fix encoding of directoryName constraints by @sfackler in #429

What's Changed

• Implement From<KeyPair> for PrivateKeyDer<'static> by @LebedevRI in #403
• update copyright year in LICENSE by @jasmyhigh in #407
• Add P521-SHA256 and P521-SHA384 signing algorithms by @djc in #408

What's Changed

• Use private cfg for docs.rs-like builds by @ctz in #384
• Expand rustdoc for CertificateSigningRequestParams::from_der by @dwhjames in #386
• Group imports by @iamjpotts in #381
• examples: add signing new cert using existing ca pem files by @iamjpotts in #379
• Tweak CSR parsing errors/documentation by @djc in #390
• Rename invalid CSR signature error variant by @djc in #393
• chore: fix some typos in comments by @black5box in #395
• ci: sync cargo-check-external-types nightly by @cpu in #399
• Forward selected crypto backend to x509-parser by @djc in #398

Implement SigningKey for &impl SigningKey to make Issuer more broadly useful.

What's Changed

• Forward signing and public key data through references by @djc in #380

What's Changed

• Upgrade botan to 0.12 by @djc in #377
• Upgrade x509-parser to 0.18 by @djc in #376
• Add unstable support for ML-DSA algorithms by @djc in #374

What's Changed

• docs: fix typo in PKCS_RSA_SHA384 doc comment by @Bravo555 in #367
• Fix regression in key usage purpose encoding by @djc in #369

• Add a CertifiedIssuer type (see #363)

What's changed

• Add a CertifiedIssuer by @djc in #363
• Provide a non-owning constructor for Issuer by @p-avital in #362
• Allow access to the CertifiedIssuer's Certificate by @djc in #364

Declare 1.71 rust-version and check MSRV in CI.

What's Changed

• Check MSRV in CI by @djc in #361