(Visual FoxPro) Find Certificate by Email Address

See more Cert Store Examples

In an X.509 certificate, an email address can typically be located in two places:

1. RFC822 Name (Subject Alternative Name extension) -
   • The certificate may include an email address in the Subject Alternative Name (SAN) extension under the RFC822 Name field. This is a modern and preferred method because it allows for flexibility and alignment with security best practices.
   • To find it, Chilkat inspects the SAN extension in the certificate details.
2. Subject (Common Name or Email Address attribute) -
   • Older certificates may store the email address directly in the Subject field, typically under the Email Address attribute ("emailAddress") or, less commonly, the Common Name (CN).
   • This method is less preferred in modern standards but can still be encountered in legacy implementations. Chilkat also searches here for the email address.

Note: Requires Chilkat v10.1.2 or later.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loCertStore
LOCAL lnReadOnly
LOCAL lnSuccess
LOCAL loJson
LOCAL lcEmail_address
LOCAL loCert

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.CertStore')
loCertStore = CreateObject('Chilkat.CertStore')

* This opens the Current User certificate store on Windows,
* On MacOS and iOS it opens the default Keychain.
lnReadOnly = 0
lnSuccess = loCertStore.OpenCurrentUserStore(lnReadOnly)
IF (lnSuccess = 0) THEN
    ? loCertStore.LastErrorText
    RELEASE loCertStore
    CANCEL
ENDIF

* Find the certificate having the specified email address in either the RFC822 Name or in the Subject.
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonObject')
loJson = CreateObject('Chilkat.JsonObject')
lcEmail_address = "joe@example.com"
loJson.UpdateString("email",lcEmail_address)

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Cert')
loCert = CreateObject('Chilkat.Cert')
lnSuccess = loCertStore.FindCert(loJson,loCert)
IF (lnSuccess = 1) THEN
    * Show the full distinguished name of the certificate.
    ? "Found: " + loCert.SubjectDN
ELSE
    ? "Not found."
ENDIF

RELEASE loCertStore
RELEASE loJson
RELEASE loCert