(CkPython) Binary Certificate Extension Data

See more Certificates Examples

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux

import sys
import chilkat

cert = chilkat.CkCert()

success = cert.LoadFromFile("qa_data/certs/testCert.cer")
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

bd = chilkat.CkBinData()

# The particular certificate in this test contains the following extensions

oid = "1.2.250.1.71.1.2.5"
success = cert.GetExtensionBd(oid,bd)
if (success == True):
    print(oid + ": " + bd.getEncoded("hex_lower"))

oid = "1.2.250.1.71.1.2.2"
success = cert.GetExtensionBd(oid,bd)
if (success == True):
    print(oid + ": " + bd.getEncoded("hex_lower"))

oid = "1.2.250.1.71.1.2.3"
success = cert.GetExtensionBd(oid,bd)
if (success == True):
    print(oid + ": " + bd.getEncoded("hex_lower"))

oid = "1.2.250.1.71.1.2.7"
success = cert.GetExtensionBd(oid,bd)
if (success == True):
    print(oid + ": " + bd.getEncoded("hex_lower"))

oid = "1.2.250.1.71.4.2.5"
success = cert.GetExtensionBd(oid,bd)
if (success == True):
    print(oid + ": " + bd.getEncoded("hex_lower"))

# Sample output:
# 1.2.250.1.71.1.2.5: 040180
# 1.2.250.1.71.1.2.2: 020100
# 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
# 1.2.250.1.71.1.2.7: 02010a
# 1.2.250.1.71.4.2.5: 30060c04534d3236

# The above binary values are actually ASN.1
# You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
# and then you extract the values from the XML.

oid = "1.2.250.1.71.1.2.5"
strXml = cert.getExtensionAsXml(oid)
if (cert.get_LastMethodSuccess() == True):
    print(oid + ": " + strXml)

oid = "1.2.250.1.71.1.2.2"
strXml = cert.getExtensionAsXml(oid)
if (cert.get_LastMethodSuccess() == True):
    print(oid + ": " + strXml)

oid = "1.2.250.1.71.1.2.3"
strXml = cert.getExtensionAsXml(oid)
if (cert.get_LastMethodSuccess() == True):
    print(oid + ": " + strXml)

oid = "1.2.250.1.71.1.2.7"
strXml = cert.getExtensionAsXml(oid)
if (cert.get_LastMethodSuccess() == True):
    print(oid + ": " + strXml)

oid = "1.2.250.1.71.4.2.5"
strXml = cert.getExtensionAsXml(oid)
if (cert.get_LastMethodSuccess() == True):
    print(oid + ": " + strXml)

# Sample output:
# 1.2.250.1.71.1.2.5: <octets>gA==</octets>
# 1.2.250.1.71.1.2.2: <int>00</int>
# 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
# 1.2.250.1.71.1.2.7: <int>0A</int>
# 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

# "gA==" is the base64 encoded byte values
# "0A" is hex for decimal 1