Java

Find Certificate by Email Address

See more Cert Store Examples

Demonstrates how to find a certificate having the specified email address either within the cert's subject email, or the RFC822 name.

In an X.509 certificate, an email address can typically be located in two places:

1. RFC822 Name (Subject Alternative Name extension) -
   • The certificate may include an email address in the Subject Alternative Name (SAN) extension under the RFC822 Name field. This is a modern and preferred method because it allows for flexibility and alignment with security best practices.
   • To find it, Chilkat inspects the SAN extension in the certificate details.
2. Subject (Common Name or Email Address attribute) -
   • Older certificates may store the email address directly in the Subject field, typically under the Email Address attribute ("emailAddress") or, less commonly, the Common Name (CN).
   • This method is less preferred in modern standards but can still be encountered in legacy implementations. Chilkat also searches here for the email address.

Note: Requires Chilkat v10.1.2 or later.

Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.CertStore;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.JsonObject;

public class ChilkatExample {

    public static void main(String[] args) {
        CertStore certStore = new CertStore();

        // This opens the Current User certificate store on Windows,
        // On MacOS and iOS it opens the default Keychain.
        boolean readOnly = false;
        try {
            certStore.openCurrentUserStore(readOnly);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Find the certificate having the specified email address in either the RFC822 Name or in the Subject.
        JsonObject json = new JsonObject();
        String email_address = "joe@example.com";
        json.updateString("email", email_address);

        Cert cert = new Cert();
        try {
            certStore.findCert(json, cert);
            // Show the full distinguished name of the certificate.
            System.out.println("Found: " + cert.getSubjectDN());
        } catch (ChilkatException e) {
            System.out.println("Not found.");
        }
    }
}