(Java) Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    CkCert cert = new CkCert();

    boolean success = cert.LoadFromFile("qa_data/certs/sample.cer");
    if (success == false) {
        System.out.println(cert.lastErrorText());
        return;
        }

    CkXml xml = new CkXml();
    xml.LoadXml(cert.subjectAlternativeName());
    System.out.println(xml.getXml());

    // A certificate with a User Principal Name in the SAN might have this:

    // <SubjectAltName>
    //     <rfc822Name>joe@example.com</rfc822Name>
    //     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
    // </SubjectAltName>

    // The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
    String upn = xml.chilkatPath("/A/name,oid,1.3.6.1.4.1.311.20.2.3|*");
    if (xml.get_LastMethodSuccess() == false) {
        System.out.println("No user principle name.");
        }
    else {
        System.out.println("User Principle Name = " + upn);
        }
  }
}