(Android™) Find Certificate by Email Address

See more Cert Store Examples

In an X.509 certificate, an email address can typically be located in two places:

1. RFC822 Name (Subject Alternative Name extension) -
   • The certificate may include an email address in the Subject Alternative Name (SAN) extension under the RFC822 Name field. This is a modern and preferred method because it allows for flexibility and alignment with security best practices.
   • To find it, Chilkat inspects the SAN extension in the certificate details.
2. Subject (Common Name or Email Address attribute) -
   • Older certificates may store the email address directly in the Subject field, typically under the Email Address attribute ("emailAddress") or, less commonly, the Common Name (CN).
   • This method is less preferred in modern standards but can still be encountered in legacy implementations. Chilkat also searches here for the email address.

Note: Requires Chilkat v10.1.2 or later.

Chilkat Android™ Downloads Android™ Java Libraries Android C/C++ Libraries

// Important: Don't forget to include the call to System.loadLibrary
// as shown at the bottom of this code sample.
package com.test;

import android.app.Activity;
import com.chilkatsoft.*;

import android.widget.TextView;
import android.os.Bundle;

public class SimpleActivity extends Activity {

  private static final String TAG = "Chilkat";

  // Called when the activity is first created.
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    CkCertStore certStore = new CkCertStore();

    // This opens the Current User certificate store on Windows,
    // On MacOS and iOS it opens the default Keychain.
    boolean readOnly = false;
    boolean success = certStore.OpenCurrentUserStore(readOnly);
    if (success == false) {
        Log.i(TAG, certStore.lastErrorText());
        return;
        }

    // Find the certificate having the specified email address in either the RFC822 Name or in the Subject.
    CkJsonObject json = new CkJsonObject();
    String email_address = "joe@example.com";
    json.UpdateString("email",email_address);

    CkCert cert = new CkCert();
    success = certStore.FindCert(json,cert);
    if (success == true) {
        // Show the full distinguished name of the certificate.
        Log.i(TAG, "Found: " + cert.subjectDN());
        }
    else {
        Log.i(TAG, "Not found.");
        }


  }

  static {
      System.loadLibrary("chilkat");

      // Note: If the incorrect library name is passed to System.loadLibrary,
      // then you will see the following error message at application startup:
      //"The application <your-application-name> has stopped unexpectedly. Please try again."
  }
}