AutoIt

Generate CSR with Uncommon Fields

See more CSR Examples

Demonstrates how to generate a new RSA key and a Certificate Signing Request (CSR) for this:

csr.common.name=Admin forInformation-MainShop
csr.serial.number=1-XYZ|2-2.0|3-999695
csr.organization.identifier=990099994100099
csr.organization.unit.name=9999910000
csr.organization.name=9999910000
csr.country.name=SA
csr.invoice.type=1100
csr.location.address=King Fahed Road
csr.industry.business.category=MainOffice

AutoIt

Local $bSuccess = False

; This requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; First generate an RSA private key.
$oRsa = ObjCreate("Chilkat.Rsa")

; Generate a random 2048-bit RSA key.
$oPrivKey = ObjCreate("Chilkat.PrivateKey")
$bSuccess = $oRsa.GenKey(2048,$oPrivKey)
If ($bSuccess = False) Then
    ConsoleWrite($oRsa.LastErrorText & @CRLF)
    Exit
EndIf

; Create the CSR object and set properties.
$oCsr = ObjCreate("Chilkat.Csr")

$oCsr.CommonName = "Admin forInformation-MainShop"

; Country Name (2 letter code)
$oCsr.Country = "SA"

; Organization Name (eg, company)
$oCsr.Company = "9999910000"

; Organizational Unit Name (eg, secion/division)
$oCsr.CompanyDivision = "9999910000"

; See https://www.alvestrand.no/objectid/2.5.4.html for OIDs for the following fields:

; csr.serial.number=1-XYZ|2-2.0|3-999695
; 2.5.4.5 - id-at-serialNumber 
$oCsr.SetSubjectField("2.5.4.5","1-XYZ|2-2.0|3-999695","UTF8String")

; csr.organization.identifier=990099994100099
; 2.5.4.45 - id-at-uniqueIdentifier   Don't know if this is correct.
$oCsr.SetSubjectField("2.5.4.45","1100","UTF8String")

; csr.invoice.type=1100
; Don't know what this OID would be...
$oCsr.SetSubjectField("2.5.4.99","1100","UTF8String")

; csr.location.address=King Fahed Road
; 2.5.4.9 - id-at-streetAddress 
$oCsr.SetSubjectField("2.5.4.9","King Fahed Road","UTF8String")

; csr.industry.business.category=MainOffice
; 2.5.4.15 - id-at-businessCategory 
$oCsr.SetSubjectField("2.5.4.15","MainOffice","UTF8String")

; Create the CSR using the private key.
Local $sPemStr = $oCsr.GenCsrPem($oPrivKey)
If ($oCsr.LastMethodSuccess <> True) Then
    ConsoleWrite($oCsr.LastErrorText & @CRLF)
    Exit
EndIf

; Save the private key and CSR to a files.
$oPrivKey.SavePkcs8EncryptedPemFile("password","qa_output/privKey1.pem")

$oFac = ObjCreate("Chilkat.FileAccess")
$oFac.WriteEntireTextFile("qa_output/csr1.pem",$sPemStr,"utf-8",False)

; Show the CSR.
ConsoleWrite($sPemStr & @CRLF)

; Sample output:
; The CSR PEM can be checked here:
; https://www.networking4all.com/en/support/tools/csr+check/
; Copy-and-paste the PEM into the online CSR Decoding / CSR Verification form

; 	-----BEGIN CERTIFICATE REQUEST-----
; 	MIIC6jCCAdICAQAwgaQxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
; ...
; ...
; 	hJnYCvjzFz4O9VtT+JtP9ldRHWV3KpZ8ne3AjD+F
; 	-----END CERTIFICATE REQUEST-----