(PHP ActiveX) Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert')
$cert = new COM("Chilkat.Cert");

$success = $cert->LoadFromFile('qa_data/certs/sample.cer');
if ($success == 0) {
    print $cert->LastErrorText . "\n";
    exit;
}

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Xml')
$xml = new COM("Chilkat.Xml");
$xml->LoadXml($cert->SubjectAlternativeName);
print $xml->getXml() . "\n";

// A certificate with a User Principal Name in the SAN might have this:

// <SubjectAltName>
//     <rfc822Name>joe@example.com</rfc822Name>
//     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
// </SubjectAltName>

// The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
$upn = $xml->chilkatPath('/A/name,oid,1.3.6.1.4.1.311.20.2.3|*');
if ($xml->LastMethodSuccess == 0) {
    print 'No user principle name.' . "\n";
}
else {
    print 'User Principle Name = ' . $upn . "\n";
}


?>