Xbase++

Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Xbase++

LOCAL nSuccess
LOCAL oCert
LOCAL oXml
LOCAL cUpn

nSuccess := 0

oCert := CreateObject("Chilkat.Cert")

nSuccess := oCert:LoadFromFile("qa_data/certs/sample.cer")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oCert:destroy()
    RETURN
ENDIF

oXml := CreateObject("Chilkat.Xml")
oXml:LoadXml(oCert:SubjectAlternativeName)
? oXml:GetXml()

//  A certificate with a User Principal Name in the SAN might have this:

//  <SubjectAltName>
//      <rfc822Name>joe@example.com</rfc822Name>
//      <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
//  </SubjectAltName>

//  The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
cUpn := oXml:ChilkatPath("/A/name,oid,1.3.6.1.4.1.311.20.2.3|*")
IF (oXml:LastMethodSuccess == 0)
    ? "No user principle name."
ELSE
    ? "User Principle Name = " + cUpn
ENDIF

oCert:destroy()
oXml:destroy()