PHP Requires Chilkat v11.0.0+

Get Certificates from .p12 / .pfx

See more PFX/P12 Examples

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication. Chilkat2 PHP

<?php

use Chilkat2\Cert;
use Chilkat2\Pfx;

$pfx = new Pfx();

try {
    $pfx->LoadPfxFile('qa_data/pfx/test.pfx', 'pfx_password');
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

// Iterate over the certs contained in the PFX
$cert = new Cert();
$numCerts = $pfx->NumCerts;
$i = 0;
while ($i < $numCerts) {
    $pfx->CertAt($i, $cert);

    echo '--- ', $i, " ---\n";
    echo $cert->SubjectDN, "\n";
    // Is this a root cert, or self-signed?
    echo 'Root: ', ($cert->IsRoot ? 'true' : 'false'), "\n";
    echo 'Self-Signed: ', ($cert->SelfSigned ? 'true' : 'false'), "\n";

    // If this certificate is not the root (self-signed), then get the issuer.
    // If the issuing certificate is contained in the PFX, then it will be found here..
    if (!$cert->SelfSigned) {
        $issuer = $cert->FindIssuer();
        if ($issuer === null) {
            echo "Issuer not found.\n";
        } else {
            echo 'Issuer: ', $issuer->SubjectDN, "\n";
        }
    }

    $i = $i + 1;
}

// Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.