(PowerShell) Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

$cert = New-Object Chilkat.Cert

$success = $cert.LoadFromFile("qa_data/certs/sample.cer")
if ($success -eq $false) {
    $($cert.LastErrorText)
    exit
}

$xml = New-Object Chilkat.Xml
$xml.LoadXml($cert.SubjectAlternativeName)
$($xml.GetXml())

# A certificate with a User Principal Name in the SAN might have this:

# <SubjectAltName>
#     <rfc822Name>joe@example.com</rfc822Name>
#     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
# </SubjectAltName>

# The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
$upn = $xml.ChilkatPath("/A/name,oid,1.3.6.1.4.1.311.20.2.3|*")
if ($xml.LastMethodSuccess -eq $false) {
    $("No user principle name.")
}
else {
    $("User Principle Name = " + $upn)
}