---
name: "libressl-PKEY_USAGE_PERIOD_new"
section: "3"
platform: "linux"
package: "libressl"
version: "4.4.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/libressl-PKEY_USAGE_PERIOD_new"
---

# libressl-PKEY\_USAGE\_PERIOD\_new(3)

X.509 certificate private key usage period extension

## NAME

**PKEY\_USAGE\_PERIOD\_new**, **PKEY\_USAGE\_PERIOD\_free** – X.509 certificate private key usage period extension

## SYNOPSIS

Crypto Library (libcrypto, -lcrypto)

**#include \<openssl/x509v3.h\>**

*PKEY\_USAGE\_PERIOD* *\**\

**PKEY\_USAGE\_PERIOD\_new**(*void*);

*void*\

**PKEY\_USAGE\_PERIOD\_free**(*PKEY\_USAGE\_PERIOD \*period*);

## DESCRIPTION

**PKEY\_USAGE\_PERIOD\_new**() allocates and initializes an empty *PKEY\_USAGE\_PERIOD* object, representing an ASN.1 *PrivateKeyUsagePeriod* structure defined in RFC 3280 section 4.2.1.4. It could be used in *X509* certificates to specify a validity period for the private key that differed from the validity period of the certificate.

**PKEY\_USAGE\_PERIOD\_free**() frees *period*.

## RETURN VALUES

**PKEY\_USAGE\_PERIOD\_new**() returns the new *PKEY\_USAGE\_PERIOD* object or NULL if an error occurs.

## SEE ALSO

d2i\_PKEY\_USAGE\_PERIOD(3), EXTENDED\_KEY\_USAGE\_new(3), X509\_CINF\_new(3), X509\_EXTENSION\_new(3), X509\_new(3)

## STANDARDS

RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, section 4.2.1.4: Private Key Usage Period

RFC 3280 was obsoleted by RFC 5280, which says: "Section 4.2.1.4 in RFC 3280, which specified the *PrivateKeyUsagePeriod* certificate extension but deprecated its use, was removed. Use of this ISO standard extension is neither deprecated nor recommended for use in the Internet PKI."

## HISTORY

**PKEY\_USAGE\_PERIOD\_new**() and **PKEY\_USAGE\_PERIOD\_free**() first appeared in OpenSSL 0.9.2b and have been available since OpenBSD 2.6.