Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Download Chilkat Socket ActiveX

<?php

$socket = new COM("Chilkat.Socket");

$success = $socket->UnlockComponent('Anything for 30-day trial');
if ($success != true) {
    print 'Failed to unlock component' . "\n";
    exit;
}

$ssl = true;
$maxWaitMillisec = 20000;

//  The SSL server hostname may be an IP address, a domain name,
//  or "localhost".

$sslServerHost = 'www.paypal.com';
$sslServerPort = 443;

//  Connect to the SSL server:
$success = $socket->Connect($sslServerHost,$sslServerPort,$ssl,$maxWaitMillisec);
if ($success != true) {
    print $socket->lastErrorText() . "\n";
    exit;
}

$cert = $socket->GetSslServerCert();
if (!(is_null($cert))) {

    print 'Server Certificate:' . "\n";
    print 'Distinguished Name: ' . $cert->subjectDN() . "\n";
    print 'Common Name: ' . $cert->subjectCN() . "\n";
    print 'Issuer Distinguished Name: ' . $cert->issuerDN() . "\n";
    print 'Issuer Common Name: ' . $cert->issuerCN() . "\n";

    $bExpired = $cert->IsExpired();
    $bRevoked = $cert->Revoked;
    $bSignatureVerified = $cert->SignatureVerified;
    $bTrustedRoot = $cert->TrustedRoot;

    print 'Expired: ' . $bExpired . "\n";
    print 'Revoked: ' . $bRevoked . "\n";
    print 'Signature Verified: ' . $bSignatureVerified . "\n";
    print 'Trusted Root: ' . $bTrustedRoot . "\n";

}

//  Close the connection with the server
//  Wait a max of 20 seconds (20000 millsec)
$socket->Close(20000);


?>