(JavaScript) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

var success = false;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var http = new CkHttp();

// We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).
var sslCert = new CkCert();
success = http.GetServerCert("apple.com",443,sslCert);
if (success == false) {
    console.log(http.LastErrorText);
    return;
}

var certChain = new CkCertChain();
success = sslCert.BuildCertChain(certChain);
if (success == false) {
    console.log(sslCert.LastErrorText);
    return;
}

var cert = new CkCert();
var i = 0;
var numCerts = certChain.NumCerts;
while (i < numCerts) {
    certChain.CertAt(i,cert);
    console.log("SubjectDN " + i + ": " + cert.SubjectDN);
    console.log("IssuerDN " + i + ": " + cert.IssuerDN);
    i = i+1;
}

// If the certificate chain reaches the root CA cert, then the last cert in the chain
// is the root CA cert.
if (certChain.ReachesRoot == true) {
    var caCert = new CkCert();
    certChain.CertAt(numCerts - 1,caCert);
    console.log("CA Root Cert: " + caCert.SubjectDN);
}