Perl Requires Chilkat v10.1.2+

Find Certificate by Email Address

See more Cert Store Examples

Demonstrates how to find a certificate having the specified email address either within the cert's subject email, or the RFC822 name.

In an X.509 certificate, an email address can typically be located in two places:

1. RFC822 Name (Subject Alternative Name extension) -
   • The certificate may include an email address in the Subject Alternative Name (SAN) extension under the RFC822 Name field. This is a modern and preferred method because it allows for flexibility and alignment with security best practices.
   • To find it, Chilkat inspects the SAN extension in the certificate details.
2. Subject (Common Name or Email Address attribute) -
   • Older certificates may store the email address directly in the Subject field, typically under the Email Address attribute ("emailAddress") or, less commonly, the Common Name (CN).
   • This method is less preferred in modern standards but can still be encountered in legacy implementations. Chilkat also searches here for the email address.

Chilkat2 Perl

use strict;
use warnings;
use Chilkat2;

my $certStore = Chilkat2::CertStore->new;

# This opens the Current User certificate store on Windows,
# On MacOS and iOS it opens the default Keychain.
my $readOnly = 0;
my $success = $certStore->OpenCurrentUserStore($readOnly);
if (!$success) {
    print $certStore->LastErrorText, "\n";
    exit;
}

# Find the certificate having the specified email address in either the RFC822 Name or in the Subject.
my $json = Chilkat2::JsonObject->new;
my $email_address = 'joe@example.com';
$json->UpdateString('email', $email_address);

my $cert = Chilkat2::Cert->new;
$success = $certStore->FindCert($json, $cert);
if ($success) {
    # Show the full distinguished name of the certificate.
    print 'Found: ', $cert->SubjectDN, "\n";
} else {
    print "Not found.\n";
}