DataFlex

Get Certificate Distinguished Name in .NET Format

See more Certificates Examples

Certificate distinguished names (DN's), in the real world, can be constructed in various ways. Some systems expect certain ways of doing things. This example demonstrates how to get a DN (or SimpleName) exactly as .NET would return it.

This example requires Chilkat v9.5.0.96.

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoCert
    String sSubjectDN
    String sTemp1

    Move False To iSuccess

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End

    Get ComLoadFromFile Of hoCert "qa_data/certs/testCert.cer" To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCert To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // In 99% of all cases, Chilkat already returns the Distinguished Name in the identical format as .NET.
    // 
    // In most cases, (internal to the certificate) the ASN.1 for the certificate's Subject 
    // contains a sesquence of OIDs and values, where each OID is the single item in a SET.
    // For example:

    // SEQUENCE (3 elem)
    //       SET (1 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
    //           PrintableString FR
    //       SET (1 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.12 title (X.520 DN component)
    //           UTF8String M�decin
    //       SET (3 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.42 givenName (X.520 DN component)
    //           UTF8String ALAIN
    //       SET (3 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.4 surname (X.520 DN component)
    //           UTF8String DUBOIS RPPS
    //       SET (3 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
    //           UTF8String 389900098933

    // If we look at the DN, we get this:
    Get ComSubjectDN Of hoCert To sSubjectDN
    Showln sSubjectDN

    // Chilkat produces this:
    // C=FR, Title=M�decin, G=ALAIN, SN=DUBOIS RPPS, CN=389900098933

    // However, if the certificate's internal ASN.1 groups several items in a single SET,
    // such as shown below, Microsoft .NET will produce a DN like this:
    // G=ALAIN + SN=DUBOIS RPPS + CN=389900098933, T=M�decin, C=FR

    // Notice how the items in the SET are grouped with " + ".
    // Also notice the order is reverse, and "T" is used instead of using "Title.
    // These are all variations of how a DN might be formatted.
    // In practice, there is no correct way because what is needed depends on what is
    // required as input to whatever is receiving the DN.

    // SEQUENCE (3 elem)
    //       SET (1 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
    //           PrintableString FR
    //       SET (1 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.12 title (X.520 DN component)
    //           UTF8String M�decin
    //       SET (3 elem)
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.42 givenName (X.520 DN component)
    //           UTF8String ALAIN
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.4 surname (X.520 DN component)
    //           UTF8String DUBOIS RPPS
    //         SEQUENCE (2 elem)
    //           OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
    //           UTF8String 389900098933

    // To ensure Chilkat produces the same DN format as .NET, you can specify
    // the keyword "DotNetSimpleName" in the UncommonOptions.
    // For example:

    Set ComUncommonOptions Of hoCert To "DotNetSimpleName"

    // If the above option is used (which was added in Chilkat v9.5.0.96), then Chilkat
    // will produce the DN in the same format as .NET

    Get ComSubjectDN Of hoCert To sSubjectDN
    Showln sSubjectDN

    // Now Chilkat produces this:
    // G=ALAIN + SN=DUBOIS RPPS + CN=389900098933, T=M�decin, C=FR


End_Procedure