(Java) Generate CSR with Uncommon Fields

See more CSR Examples

Demonstrates how to generate a new RSA key and a Certificate Signing Request (CSR) for this:

csr.common.name=Admin forInformation-MainShop
csr.serial.number=1-XYZ|2-2.0|3-999695
csr.organization.identifier=990099994100099
csr.organization.unit.name=9999910000
csr.organization.name=9999910000
csr.country.name=SA
csr.invoice.type=1100
csr.location.address=King Fahed Road
csr.industry.business.category=MainOffice

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // First generate an RSA private key.
    CkRsa rsa = new CkRsa();

    // Generate a random 2048-bit RSA key.
    boolean success = rsa.GenerateKey(2048);
    if (success != true) {
        System.out.println(rsa.lastErrorText());
        return;
        }

    // Get the private key
    CkPrivateKey privKey = rsa.ExportPrivateKeyObj();

    // Create the CSR object and set properties.
    CkCsr csr = new CkCsr();

    csr.put_CommonName("Admin forInformation-MainShop");

    // Country Name (2 letter code)
    csr.put_Country("SA");

    // Organization Name (eg, company)
    csr.put_Company("9999910000");

    // Organizational Unit Name (eg, secion/division)
    csr.put_CompanyDivision("9999910000");

    // See https://www.alvestrand.no/objectid/2.5.4.html for OIDs for the following fields:

    // csr.serial.number=1-XYZ|2-2.0|3-999695
    // 2.5.4.5 - id-at-serialNumber 
    csr.SetSubjectField("2.5.4.5","1-XYZ|2-2.0|3-999695","UTF8String");

    // csr.organization.identifier=990099994100099
    // 2.5.4.45 - id-at-uniqueIdentifier   Don't know if this is correct.
    csr.SetSubjectField("2.5.4.45","1100","UTF8String");

    // csr.invoice.type=1100
    // Don't know what this OID would be...
    csr.SetSubjectField("2.5.4.99","1100","UTF8String");

    // csr.location.address=King Fahed Road
    // 2.5.4.9 - id-at-streetAddress 
    csr.SetSubjectField("2.5.4.9","King Fahed Road","UTF8String");

    // csr.industry.business.category=MainOffice
    // 2.5.4.15 - id-at-businessCategory 
    csr.SetSubjectField("2.5.4.15","MainOffice","UTF8String");

    // Create the CSR using the private key.
    String pemStr = csr.genCsrPem(privKey);
    if (csr.get_LastMethodSuccess() != true) {
        System.out.println(csr.lastErrorText());

        return;
        }

    // Save the private key and CSR to a files.
    privKey.SavePkcs8EncryptedPemFile("password","qa_output/privKey1.pem");

    CkFileAccess fac = new CkFileAccess();
    fac.WriteEntireTextFile("qa_output/csr1.pem",pemStr,"utf-8",false);

    // Show the CSR.
    System.out.println(pemStr);

    // Sample output:
    // The CSR PEM can be checked here:
    // https://www.networking4all.com/en/support/tools/csr+check/
    // Copy-and-paste the PEM into the online CSR Decoding / CSR Verification form

    // 	-----BEGIN CERTIFICATE REQUEST-----
    // 	MIIC6jCCAdICAQAwgaQxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
    // ...
    // ...
    // 	hJnYCvjzFz4O9VtT+JtP9ldRHWV3KpZ8ne3AjD+F
    // 	-----END CERTIFICATE REQUEST-----
  }
}