certificates

The company's client certificate (A1, PKCS#12) for banks and government APIs: fetch with mutual TLS and XML signatures (XMLDSig, enveloped, RSA-SHA256, C14N 1.0). The certificate is stored on the server with notusbase certificate set <name> <file.pfx>; functions only pass its name, and the key never reaches JavaScript.

A library, not a module with tables: no schema.ts and no convex/certificates.ts. Importing it is enough.

import { fetchWithCertificate, signXml } from "notusbase-modules/certificates";

const response = await fetchWithCertificate("company", "https://api.bank.example/oauth/v2/token", { method: "POST", body });
const signed = await signXml("company", dps, { id: "DPS0001" });

Actions in the default runtime only (not "use node"). Storage, the signature profile and the limits are in the guide. The Go side is certificates.go and xmlsign.go; the tests are in certificates_test.go.