Export Certificate and Private Key to PFX

Demonstrates how to export a digital certificate, it's private key, and potentially all certificates in the chain of authentication to a PFX file.

Download Chilkat Java Library

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success;

    //  This object is used to create a certificate store object.
    CkCreateCS ccs = new CkCreateCS();

    CkCertStore certStore;
    //  Open the local machine certificate store read-only.
    ccs.put_ReadOnly(true);
    certStore = ccs.OpenLocalSystemStore();

    //  Can we find a certificate by email address?
    CkCert cert;
    cert = certStore.FindCertBySubjectE("admin@chilkatsoft.com");
    if (cert == null ) {
        //  Open the current-user certificate store and check it instead.

        System.out.println("Checking current-user certificate store...");

        certStore = ccs.OpenCurrentUserStore();

        cert = certStore.FindCertBySubjectE("admin@chilkatsoft.com");
        if (cert == null ) {
            System.out.println("Failed to find certificate!");
            return;
        }

    }

    //  Does this certificate have a private key accessible
    //  to the calling process?  Private keys are *not* stored
    //  within the certificate store.  Private keys are stored
    //  in a key container in a Windows protected store.  It
    //  can be one of two protected stores: the protected store for
    //  the current logged-in user account, or the "machine-key"
    //  protected store.  The private key must both exist in a
    //  protected store, and the process must have permission to
    //  access it...

    //  You can only export to a PFX if the private key exists
    //  and is accessible.

    if (cert.HasPrivateKey() == true) {

        //  Export to a PFX.
        //  Provide a password that will be required whenever the PFX is opened.
        //  Also, include all certs in the chain of authentication.
        boolean bIncludeChain;
        bIncludeChain = true;
        success = cert.ExportToPfxFile("myCert.pfx","myPassword",bIncludeChain);
        if (success != true) {
            System.out.println(cert.lastErrorText());
        }
        else {
            System.out.println("Exported to PFX!");
        }

    }
    else {
        System.out.println("Certificate does not have a private key available");
    }

    //  The Chilkat Certificate, Certificate Store, Private Key,
    //  Public Key, and Key Container classes / objects are freeware.

    //  They are used by and included with the Chilkat Email,
    //  Crypt, S/MIME, and other commercial Chilkat components.

  }
}