Rust

Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Rust

let cert = chilkat::Cert::new();

if cert.load_from_file("qa_data/certs/testCert.cer").is_err() {
    println!("{}", cert.last_error_text());
    return;
}

let bd = chilkat::BinData::new();

// The particular certificate in this test contains the following extensions

let mut oid = "1.2.250.1.71.1.2.5".to_string();
if cert.get_extension_bd(&oid, &bd).is_ok() {
    println!("{}: {}", oid, bd.get_encoded("hex_lower").unwrap_or_default());
}

oid = "1.2.250.1.71.1.2.2".to_string();
if cert.get_extension_bd(&oid, &bd).is_ok() {
    println!("{}: {}", oid, bd.get_encoded("hex_lower").unwrap_or_default());
}

oid = "1.2.250.1.71.1.2.3".to_string();
if cert.get_extension_bd(&oid, &bd).is_ok() {
    println!("{}: {}", oid, bd.get_encoded("hex_lower").unwrap_or_default());
}

oid = "1.2.250.1.71.1.2.7".to_string();
if cert.get_extension_bd(&oid, &bd).is_ok() {
    println!("{}: {}", oid, bd.get_encoded("hex_lower").unwrap_or_default());
}

oid = "1.2.250.1.71.4.2.5".to_string();
if cert.get_extension_bd(&oid, &bd).is_ok() {
    println!("{}: {}", oid, bd.get_encoded("hex_lower").unwrap_or_default());
}

// Sample output:
// 1.2.250.1.71.1.2.5: 040180
// 1.2.250.1.71.1.2.2: 020100
// 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
// 1.2.250.1.71.1.2.7: 02010a
// 1.2.250.1.71.4.2.5: 30060c04534d3236

// The above binary values are actually ASN.1
// You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
// and then you extract the values from the XML.

oid = "1.2.250.1.71.1.2.5".to_string();
let mut str_xml = cert.get_extension_as_xml(&oid).unwrap_or_default();
if cert.last_method_success() {
    println!("{}: {}", oid, str_xml);
}

oid = "1.2.250.1.71.1.2.2".to_string();
str_xml = cert.get_extension_as_xml(&oid).unwrap_or_default();
if cert.last_method_success() {
    println!("{}: {}", oid, str_xml);
}

oid = "1.2.250.1.71.1.2.3".to_string();
str_xml = cert.get_extension_as_xml(&oid).unwrap_or_default();
if cert.last_method_success() {
    println!("{}: {}", oid, str_xml);
}

oid = "1.2.250.1.71.1.2.7".to_string();
str_xml = cert.get_extension_as_xml(&oid).unwrap_or_default();
if cert.last_method_success() {
    println!("{}: {}", oid, str_xml);
}

oid = "1.2.250.1.71.4.2.5".to_string();
str_xml = cert.get_extension_as_xml(&oid).unwrap_or_default();
if cert.last_method_success() {
    println!("{}: {}", oid, str_xml);
}

// Sample output:
// 1.2.250.1.71.1.2.5: <octets>gA==</octets>
// 1.2.250.1.71.1.2.2: <int>00</int>
// 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
// 1.2.250.1.71.1.2.7: <int>0A</int>
// 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

// "gA==" is the base64 encoded byte values
// "0A" is hex for decimal 10