(Classic ASP) Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Socket")
set socket = Server.CreateObject("Chilkat.Socket")

ssl = 1
maxWaitMillisec = 20000

' The SSL server hostname may be an IP address, a domain name,
' or "localhost". 

sslServerHost = "www.paypal.com"
sslServerPort = 443

' Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( socket.LastErrorText) & "</pre>"
    Response.End
End If

' cert is a Chilkat.Cert
Set cert = socket.GetSslServerCert()
If (socket.LastMethodSuccess <> 0) Then

    Response.Write "<pre>" & Server.HTMLEncode( "Server Certificate:") & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Distinguished Name: " & cert.SubjectDN) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Common Name: " & cert.SubjectCN) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Issuer Distinguished Name: " & cert.IssuerDN) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Issuer Common Name: " & cert.IssuerCN) & "</pre>"

    bExpired = cert.Expired
    bRevoked = cert.Revoked
    bSignatureVerified = cert.SignatureVerified
    bTrustedRoot = cert.TrustedRoot

    Response.Write "<pre>" & Server.HTMLEncode( "Expired: " & bExpired) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Revoked: " & bRevoked) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Signature Verified: " & bSignatureVerified) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "Trusted Root: " & bTrustedRoot) & "</pre>"

End If

' Close the connection with the server
' Wait a max of 20 seconds (20000 millsec)
success = socket.Close(20000)

%>
</body>
</html>