(PHP Extension) Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

$cert = new CkCert();

$success = $cert->LoadFromFile('qa_data/certs/testCert.cer');
if ($success == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

$bd = new CkBinData();

// The particular certificate in this test contains the following extensions

$oid = '1.2.250.1.71.1.2.5';
$success = $cert->GetExtensionBd($oid,$bd);
if ($success == true) {
    print $oid . ': ' . $bd->getEncoded('hex_lower') . "\n";
}

$oid = '1.2.250.1.71.1.2.2';
$success = $cert->GetExtensionBd($oid,$bd);
if ($success == true) {
    print $oid . ': ' . $bd->getEncoded('hex_lower') . "\n";
}

$oid = '1.2.250.1.71.1.2.3';
$success = $cert->GetExtensionBd($oid,$bd);
if ($success == true) {
    print $oid . ': ' . $bd->getEncoded('hex_lower') . "\n";
}

$oid = '1.2.250.1.71.1.2.7';
$success = $cert->GetExtensionBd($oid,$bd);
if ($success == true) {
    print $oid . ': ' . $bd->getEncoded('hex_lower') . "\n";
}

$oid = '1.2.250.1.71.4.2.5';
$success = $cert->GetExtensionBd($oid,$bd);
if ($success == true) {
    print $oid . ': ' . $bd->getEncoded('hex_lower') . "\n";
}

// Sample output:
// 1.2.250.1.71.1.2.5: 040180
// 1.2.250.1.71.1.2.2: 020100
// 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
// 1.2.250.1.71.1.2.7: 02010a
// 1.2.250.1.71.4.2.5: 30060c04534d3236

// The above binary values are actually ASN.1
// You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
// and then you extract the values from the XML.

$oid = '1.2.250.1.71.1.2.5';
$strXml = $cert->getExtensionAsXml($oid);
if ($cert->get_LastMethodSuccess() == true) {
    print $oid . ': ' . $strXml . "\n";
}

$oid = '1.2.250.1.71.1.2.2';
$strXml = $cert->getExtensionAsXml($oid);
if ($cert->get_LastMethodSuccess() == true) {
    print $oid . ': ' . $strXml . "\n";
}

$oid = '1.2.250.1.71.1.2.3';
$strXml = $cert->getExtensionAsXml($oid);
if ($cert->get_LastMethodSuccess() == true) {
    print $oid . ': ' . $strXml . "\n";
}

$oid = '1.2.250.1.71.1.2.7';
$strXml = $cert->getExtensionAsXml($oid);
if ($cert->get_LastMethodSuccess() == true) {
    print $oid . ': ' . $strXml . "\n";
}

$oid = '1.2.250.1.71.4.2.5';
$strXml = $cert->getExtensionAsXml($oid);
if ($cert->get_LastMethodSuccess() == true) {
    print $oid . ': ' . $strXml . "\n";
}

// Sample output:
// 1.2.250.1.71.1.2.5: <octets>gA==</octets>
// 1.2.250.1.71.1.2.2: <int>00</int>
// 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
// 1.2.250.1.71.1.2.7: <int>0A</int>
// 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

// "gA==" is the base64 encoded byte values
// "0A" is hex for decimal 1

?>