PowerShell

Load .crl, Convert to XML, Get Revoked Serial Numbers and Dates

See more Certificates Examples

Load a binary .crl file (Certificate Revocation List), converts to XML, and then gets the revoked certificate serial numbers and revocation dates.

Note: This example requires Chilkat v9.5.0.77 or greater.

PowerShell

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a binary .crl file.
$bdCrl = New-Object Chilkat.BinData
$success = $bdCrl.LoadFile("qa_data/crl/ca1.crl")
if ($success -ne $true) {
    $("Failed to load CRL file.")
    exit
}

$asn = New-Object Chilkat.Asn
$success = $asn.LoadBd($bdCrl)
if ($success -ne $true) {
    $($asn.LastErrorText)
    exit
}

# Convert ASN.1 to XML and load into xml and re-emit for pretty printing..
$xml = New-Object Chilkat.Xml
$xml.LoadXml($asn.AsnToXml())
$success = $xml.SaveXml("qa_output/crl.xml")

# Use this online tool to generate parsing code from CRL XML: 
# Generate Parsing Code from XML

# Here's code to parse the XML.  This code was generated by the above tool,
# and then we modified it by removing unneeded code and changing some names

$dt = New-Object Chilkat.CkDateTime

$i = 0
$count_i = $xml.NumChildrenHavingTag("sequence")
while ($i -lt $count_i) {
    $xml.I = $i

    $j = 0
    $count_j = $xml.NumChildrenHavingTag("sequence[i]|sequence")
    while ($j -lt $count_j) {
        $xml.J = $j

        $k = 0
        $count_k = $xml.NumChildrenHavingTag("sequence[i]|sequence[j]|sequence")
        while ($k -lt $count_k) {
            $xml.K = $k

            # Get the revoked certificate's serial number in uppercase hex.
            $revokedCertSerialHex = $xml.GetChildContent("sequence[i]|sequence[j]|sequence[k]|int")
            $("serial number: " + $revokedCertSerialHex)

            # Get the date/time revoked.  It will be a string formatted as "YYMMDDhhmmssZ", such as "181023093028Z"
            $dateRevoked = $xml.GetChildContent("sequence[i]|sequence[j]|sequence[k]|utctime")

            # Starting in Chilkat v9.5.0.77, date/time strings formatted as YYMMDDhhmmssZ can be parsed as follows:
            $dt.SetFromTimestamp($dateRevoked)
            $("date revoked: " + $dt.GetAsRfc822($false))

            $k = $k + 1
        }

        $j = $j + 1
    }

    $i = $i + 1
}