(PowerShell) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$http = New-Object Chilkat.Http

# We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).
$sslCert = New-Object Chilkat.Cert
$success = $http.GetServerCert("apple.com",443,$sslCert)
if ($success -eq $false) {
    $($http.LastErrorText)
    exit
}

$certChain = New-Object Chilkat.CertChain
$success = $sslCert.BuildCertChain($certChain)
if ($success -eq $false) {
    $($sslCert.LastErrorText)
    exit
}

$cert = New-Object Chilkat.Cert
$i = 0
$numCerts = $certChain.NumCerts
while ($i -lt $numCerts) {
    $certChain.CertAt($i,$cert)
    $("SubjectDN " + $i + ": " + $cert.SubjectDN)
    $("IssuerDN " + $i + ": " + $cert.IssuerDN)
    $i = $i + 1
}

# If the certificate chain reaches the root CA cert, then the last cert in the chain
# is the root CA cert.
if ($certChain.ReachesRoot -eq $true) {
    $caCert = New-Object Chilkat.Cert
    $certChain.CertAt($numCerts - 1,$caCert)
    $("CA Root Cert: " + $caCert.SubjectDN)
}