(Tcl) Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

set cert [new_CkCert]

set success [CkCert_LoadFromFile $cert "qa_data/certs/sample.cer"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

set xml [new_CkXml]

CkXml_LoadXml $xml [CkCert_subjectAlternativeName $cert]
puts [CkXml_getXml $xml]

# A certificate with a User Principal Name in the SAN might have this:

# <SubjectAltName>
#     <rfc822Name>joe@example.com</rfc822Name>
#     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
# </SubjectAltName>

# The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
set upn [CkXml_chilkatPath $xml "/A/name,oid,1.3.6.1.4.1.311.20.2.3|*"]
if {[CkXml_get_LastMethodSuccess $xml] == 0} then {
    puts "No user principle name."
} else {
    puts "User Principle Name = $upn"
}


delete_CkCert $cert
delete_CkXml $xml