Export Certificate and Private Key to PFX

Demonstrates how to export a digital certificate, it's private key, and potentially all certificate's in the chain of authentication to a PFX file.

<?php



//  This object is used to create a certificate store object.
$ccs = new COM("Chilkat.CreateCS");

//  Open the local machine certificate store read-only.
$ccs->ReadOnly = true;
$certStore = $ccs->OpenLocalSystemStore();

//  Can we find a certificate by email address?

$cert = $certStore->FindCertBySubjectE('admin@chilkatsoft.com');
if (is_null($cert)) {
    //  Open the current-user certificate store and check it instead.

    print 'Checking current-user certificate store...' . "\n";

    $certStore = $ccs->OpenCurrentUserStore();

    $cert = $certStore->FindCertBySubjectE('admin@chilkatsoft.com');
    if (is_null($cert)) {
        print 'Failed to find certificate!' . "\n";
        exit;
    }

}

//  Does this certificate have a private key accessible
//  to the calling process?  Private keys are *not* stored
//  within the certificate store.  Private keys are stored
//  in a key container in a Windows protected store.  It
//  can be one of two protected stores: the protected store for
//  the current logged-in user account, or the "machine-key"
//  protected store.  The private key must both exist in a
//  protected store, and the process must have permission to
//  access it...

//  You can only export to a PFX if the private key exists
//  and is accessible.

if ($cert->HasPrivateKey() == true) {

    //  Export to a PFX.
    //  Provide a password that will be required whenever the PFX is opened.
    //  Also, include all certs in the chain of authentication.

    $bIncludeChain = true;
    $success = $cert->ExportToPfxFile('myCert.pfx','myPassword',$bIncludeChain);
    if ($success != true) {
        print $cert->lastErrorText() . "\n";
    }
    else {
        print 'Exported to PFX!' . "\n";
    }

}
else {
    print 'Certificate does not have a private key available' . "\n";
}

//  The Chilkat Certificate, Certificate Store, Private Key,
//  Public Key, and Key Container classes / objects are freeware.

//  They are used by and included with the Chilkat Email,
//  Crypt, S/MIME, and other commercial Chilkat components.

?>