(Node.js) Get Certificates from .p12 / .pfx

A PKCS12 (.p12 / .pfx) is a container for holding a certificate, its private key, and the certs in the chain of authentication up to and possibly including the root CA cert. A .p12 is not required to contain certain things. It will contain whatever the creator of the .p12 decided to include. It's possible to contain just a private key, just a cert, many certs without private keys, or many certs with many private keys. Usually, a .p12 contains one certificate, its associated private key, and certificates in the chain of authentication.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    var pfx = new chilkat.Pfx();

    var success = pfx.LoadPfxFile("qa_data/pfx/test.pfx","pfx_password");
    if (success == false) {
        console.log(pfx.LastErrorText);
        return;
    }

    // Iterate over the certs contained in the PFX
    var numCerts = pfx.NumCerts;
    var i = 0;
    while (i < numCerts) {
        // cert: Cert
        var cert = pfx.GetCert(i);

        console.log("--- " + i + " ---");
        console.log(cert.SubjectDN);
        // Is this a root cert, or self-signed?
        console.log("Root: " + cert.IsRoot);
        console.log("Self-Signed: " + cert.SelfSigned);

        // If this certificate is not the root (self-signed), then get the issuer.
        // If the issuing certificate is contained in the PFX, then it will be found here..
        if (cert.SelfSigned !== true) {
            // issuer: Cert
            var issuer = cert.FindIssuer();
            if (cert.LastMethodSuccess == false) {
                console.log("Issuer not found.");
            }
            else {
                console.log("Issuer: " + issuer.SubjectDN);

            }

        }

        i = i+1;
    }

    // Usually, the user certificate is at index 0, its issuer is at index 1, etc. until we get to the root certificate.

}

chilkatExample();