(PHP Extension) Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux

<?php

include("chilkat.php");
// Use "chilkat_9_5_0.php" for versions of Chilkat < 10.0.0

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$socket = new CkSocket();

$ssl = true;
$maxWaitMillisec = 20000;

// The SSL server hostname may be an IP address, a domain name,
// or "localhost". 

$sslServerHost = 'www.paypal.com';
$sslServerPort = 443;

// Connect to the SSL server:
$success = $socket->Connect($sslServerHost,$sslServerPort,$ssl,$maxWaitMillisec);
if ($success != true) {
    print $socket->lastErrorText() . "\n";
    exit;
}

// cert is a CkCert
$cert = $socket->GetSslServerCert();
if ($socket->get_LastMethodSuccess() != false) {

    print 'Server Certificate:' . "\n";
    print 'Distinguished Name: ' . $cert->subjectDN() . "\n";
    print 'Common Name: ' . $cert->subjectCN() . "\n";
    print 'Issuer Distinguished Name: ' . $cert->issuerDN() . "\n";
    print 'Issuer Common Name: ' . $cert->issuerCN() . "\n";

    $bExpired = $cert->get_Expired();
    $bRevoked = $cert->get_Revoked();
    $bSignatureVerified = $cert->get_SignatureVerified();
    $bTrustedRoot = $cert->get_TrustedRoot();

    print 'Expired: ' . $bExpired . "\n";
    print 'Revoked: ' . $bRevoked . "\n";
    print 'Signature Verified: ' . $bSignatureVerified . "\n";
    print 'Trusted Root: ' . $bTrustedRoot . "\n";

}

// Close the connection with the server
// Wait a max of 20 seconds (20000 millsec)
$success = $socket->Close(20000);

?>