(Excel) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Download Excel Class Modules Chilkat Excel Class Modules

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

Dim http As Chilkat.Http
Set http = Chilkat.NewHttp

' We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).

Set sslCert = http.GetServerSslCert("nationalgeographic.com",443)
If (http.LastMethodSuccess = False) Then
    Debug.Print http.LastErrorText
    Exit Sub
End If

' Note: Prior to v9.5.0.50, this method would fail if the certificate chain could not 
' be completed to the root.  Starting in v9.5.0.50, the incomplete certificate chain 
' will be returned.  The certificate chain's ReachesRoot property can be examined to 
' see if the chain was completed to the root.

Set certChain = sslCert.GetCertChain()
If (sslCert.LastMethodSuccess = False) Then
    Debug.Print sslCert.LastErrorText

    Exit Sub
End If


i = 0

numCerts = certChain.NumCerts
Do While i < numCerts

    Set cert = certChain.GetCert(i)
    Debug.Print "SubjectDN "; i; ": "; cert.SubjectDN
    Debug.Print "IssuerDN "; i; ": "; cert.IssuerDN

    i = i + 1
Loop

' If the certificate chain reaches the root CA cert, then the last cert in the chain
' is the root CA cert.
If (certChain.ReachesRoot = True) Then

    Set caCert = certChain.GetCert(numCerts - 1)
    Debug.Print "CA Root Cert: "; caCert.SubjectDN

End If