Java

Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Java

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    boolean success = false;

    CkCert cert = new CkCert();

    success = cert.LoadFromFile("qa_data/certs/sample.cer");
    if (success == false) {
        System.out.println(cert.lastErrorText());
        return;
        }

    CkXml xml = new CkXml();
    xml.LoadXml(cert.subjectAlternativeName());
    System.out.println(xml.getXml());

    // A certificate with a User Principal Name in the SAN might have this:

    // <SubjectAltName>
    //     <rfc822Name>joe@example.com</rfc822Name>
    //     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
    // </SubjectAltName>

    // The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
    String upn = xml.chilkatPath("/A/name,oid,1.3.6.1.4.1.311.20.2.3|*");
    if (xml.get_LastMethodSuccess() == false) {
        System.out.println("No user principle name.");
        }
    else {
        System.out.println("User Principle Name = " + upn);
        }
  }
}