(PHP ActiveX) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

$success = 0;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$http = new COM("Chilkat.Http");

// We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).
$sslCert = new COM("Chilkat.Cert");
$success = $http->GetServerCert('apple.com',443,$sslCert);
if ($success == 0) {
    print $http->LastErrorText . "\n";
    exit;
}

$certChain = new COM("Chilkat.CertChain");
$success = $sslCert->BuildCertChain($certChain);
if ($success == 0) {
    print $sslCert->LastErrorText . "\n";
    exit;
}

$cert = new COM("Chilkat.Cert");
$i = 0;
$numCerts = $certChain->NumCerts;
while ($i < $numCerts) {
    $certChain->CertAt($i,$cert);
    print 'SubjectDN ' . $i . ': ' . $cert->SubjectDN . "\n";
    print 'IssuerDN ' . $i . ': ' . $cert->IssuerDN . "\n";
    $i = $i + 1;
}

// If the certificate chain reaches the root CA cert, then the last cert in the chain
// is the root CA cert.
if ($certChain->ReachesRoot == 1) {
    $caCert = new COM("Chilkat.Cert");
    $certChain->CertAt($numCerts - 1,$caCert);
    print 'CA Root Cert: ' . $caCert->SubjectDN . "\n";
}


?>