(Delphi DLL) Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Cert, BinData;

...

procedure TForm1.Button1Click(Sender: TObject);
var
cert: HCkCert;
success: Boolean;
bd: HCkBinData;
oid: PWideChar;
strXml: PWideChar;

begin
cert := CkCert_Create();

success := CkCert_LoadFromFile(cert,'qa_data/certs/testCert.cer');
if (success = False) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

bd := CkBinData_Create();

// The particular certificate in this test contains the following extensions

oid := '1.2.250.1.71.1.2.5';
success := CkCert_GetExtensionBd(cert,oid,bd);
if (success = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + CkBinData__getEncoded(bd,'hex_lower'));
  end;

oid := '1.2.250.1.71.1.2.2';
success := CkCert_GetExtensionBd(cert,oid,bd);
if (success = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + CkBinData__getEncoded(bd,'hex_lower'));
  end;

oid := '1.2.250.1.71.1.2.3';
success := CkCert_GetExtensionBd(cert,oid,bd);
if (success = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + CkBinData__getEncoded(bd,'hex_lower'));
  end;

oid := '1.2.250.1.71.1.2.7';
success := CkCert_GetExtensionBd(cert,oid,bd);
if (success = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + CkBinData__getEncoded(bd,'hex_lower'));
  end;

oid := '1.2.250.1.71.4.2.5';
success := CkCert_GetExtensionBd(cert,oid,bd);
if (success = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + CkBinData__getEncoded(bd,'hex_lower'));
  end;

// Sample output:
// 1.2.250.1.71.1.2.5: 040180
// 1.2.250.1.71.1.2.2: 020100
// 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
// 1.2.250.1.71.1.2.7: 02010a
// 1.2.250.1.71.4.2.5: 30060c04534d3236

// The above binary values are actually ASN.1
// You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
// and then you extract the values from the XML.

oid := '1.2.250.1.71.1.2.5';
strXml := CkCert__getExtensionAsXml(cert,oid);
if (CkCert_getLastMethodSuccess(cert) = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + strXml);
  end;

oid := '1.2.250.1.71.1.2.2';
strXml := CkCert__getExtensionAsXml(cert,oid);
if (CkCert_getLastMethodSuccess(cert) = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + strXml);
  end;

oid := '1.2.250.1.71.1.2.3';
strXml := CkCert__getExtensionAsXml(cert,oid);
if (CkCert_getLastMethodSuccess(cert) = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + strXml);
  end;

oid := '1.2.250.1.71.1.2.7';
strXml := CkCert__getExtensionAsXml(cert,oid);
if (CkCert_getLastMethodSuccess(cert) = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + strXml);
  end;

oid := '1.2.250.1.71.4.2.5';
strXml := CkCert__getExtensionAsXml(cert,oid);
if (CkCert_getLastMethodSuccess(cert) = True) then
  begin
    Memo1.Lines.Add(oid + ': ' + strXml);
  end;

// Sample output:
// 1.2.250.1.71.1.2.5: <octets>gA==</octets>
// 1.2.250.1.71.1.2.2: <int>00</int>
// 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
// 1.2.250.1.71.1.2.7: <int>0A</int>
// 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

// "gA==" is the base64 encoded byte values
// "0A" is hex for decimal 1

CkCert_Dispose(cert);
CkBinData_Dispose(bd);

end;