--- product: Chilkat product_version: 11.7.0 language: c language_label: C class: Pem license: bundle deprecated: false reference_html: https://www.chilkatsoft.com/refdoc/c_CkPemRef.html --- # Chilkat Pem — C — v11.7.0 > Chilkat 11.7.0 · language=c · class=Pem > Other versions: replace `11.7.0` in this URL. Other languages: `https://www.chilkatsoft.com/ai-docs/v/11.7.0//classes/Pem.md`. > Language-wide rules (install, unlock, error model, strings/bytes): `https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/guide.md`. ## Purpose **Load, inspect, assemble, export, and convert PEM certificate and key material.** `Chilkat.Pem` is the Chilkat class for handling PEM-formatted certificate and key material. It can load PEM and PKCS#7 data, add certificates, private keys, public keys, CSRs, and certificate chains, retrieve individual items, remove content, control PKCS#1 vs. PKCS#8 private key output, export PEM with optional encryption and extended attributes, and convert PEM material to PFX or Java KeyStore objects. **Load PEM and PKCS#7** Load PEM-encoded certificates, keys, CSRs, and PKCS#7 certificate data from files, strings, or memory. **Collect certs and keys** Add certificates, private keys, public keys, CSRs, and certificate chains into a single PEM container. **Retrieve individual items** Extract selected certificates, keys, CSRs, or chains for use with `Cert`, `PrivateKey`, `PublicKey`, or related Chilkat classes. **Private-key format control** Choose PKCS#1 or PKCS#8 private-key output depending on the format required by the target system. **Encrypted PEM output** Export private-key material with password-based encryption when PEM data must be stored or transferred securely. **Convert to PFX or JKS** Convert PEM certificates and keys into PFX/P12 or Java KeyStore objects when another platform or API requires those container formats. **Common pattern:** Use `Pem` when certificate and key material is packaged as one or more PEM blocks. Load the PEM, inspect or retrieve the needed items, add or remove entries as needed, then export the result as PEM, PFX/P12, or Java KeyStore data. Use `Chilkat.Cert`, `PrivateKey`, and `PublicKey` when working directly with individual objects. For an extended overview, see [Pem Class Overview](https://www.chilkatsoft.com/pem_class_overview.asp). ## Object creation, unlocking and error handling **Create/Dispose** ```c HCkPem instance = CkPem_Create(); // ... CkPem_Dispose(instance); ``` `HCkPem CkPem_Create(void);` Creates an instance of the HCkPem object and returns a handle ("void \*" pointer). The handle is passed in the 1st argument for the functions listed on this page. `void CkPem_Dispose(HCkPem handle);` Objects created by calling CkPem_Create must be freed by calling this method. A memory leak occurs if a handle is not disposed by calling this function. Also, any handle returned by a Chilkat "C" function must also be freed by the application by calling the appropriate Dispose method, such as CkPem_Dispose. Call `Global.UnlockBundle` once at the start of the program, before using this or any other Chilkat class. Any string unlocks a fully functional 30-day trial; a purchased unlock code is used in production. See `guide.md` for the exact code in C. ## Members common to every Chilkat class Documented once per language in `common-members.md`; listed here so this page is self-contained. | Property | Signature | Access | Meaning | |---|---|---|---| | `DebugLogFilePath` | `void CkPem_getDebugLogFilePath(HCkPem cHandle, HCkString retval); void CkPem_putDebugLogFilePath(HCkPem cHandle, const char *newVal); const char *CkPem_debugLogFilePath(HCkPem cHandle);` | read/write | If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. | | `LastErrorHtml` | `void CkPem_getLastErrorHtml(HCkPem cHandle, HCkString retval); const char *CkPem_lastErrorHtml(HCkPem cHandle);` | read-only | Provides HTML-formatted information about the last called method or property. | | `LastErrorText` | `void CkPem_getLastErrorText(HCkPem cHandle, HCkString retval); const char *CkPem_lastErrorText(HCkPem cHandle);` | read-only | Provides plain text information about the last called method or property. | | `LastErrorXml` | `void CkPem_getLastErrorXml(HCkPem cHandle, HCkString retval); const char *CkPem_lastErrorXml(HCkPem cHandle);` | read-only | Provides XML-formatted information about the last called method or property. | | `LastMethodSuccess` | `BOOL CkPem_getLastMethodSuccess(HCkPem cHandle); void CkPem_putLastMethodSuccess(HCkPem cHandle, BOOL newVal);` | read/write | Indicates the success or failure of the most recent method call: `TRUE` means success, `FALSE` means failure. | | `Utf8` | `BOOL CkPem_getUtf8(HCkPem cHandle); void CkPem_putUtf8(HCkPem cHandle, BOOL newVal);` | read/write | When set to `TRUE`, all `const char *` arguments and return values are interpreted as UTF-8 strings. | | `VerboseLogging` | `BOOL CkPem_getVerboseLogging(HCkPem cHandle); void CkPem_putVerboseLogging(HCkPem cHandle, BOOL newVal);` | read/write | If set to `TRUE`, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. | | `Version` | `void CkPem_getVersion(HCkPem cHandle, HCkString retval); const char *CkPem_version(HCkPem cHandle);` | read-only | Version of the component/library, such as "10.1.0" | ## Member index | Member | Kind | Signature | |---|---|---| | `AppendMode` | property, read/write | `BOOL CkPem_getAppendMode(HCkPem cHandle); void CkPem_putAppendMode(HCkPem cHandle, BOOL newVal);` | | `HeartbeatMs` | property, read/write | `int CkPem_getHeartbeatMs(HCkPem cHandle); void CkPem_putHeartbeatMs(HCkPem cHandle, int newVal);` | | `NumCerts` | property, read-only | `int CkPem_getNumCerts(HCkPem cHandle);` | | `NumCrls` | property, read-only | `int CkPem_getNumCrls(HCkPem cHandle);` | | `NumCsrs` | property, read-only | `int CkPem_getNumCsrs(HCkPem cHandle);` | | `NumPrivateKeys` | property, read-only | `int CkPem_getNumPrivateKeys(HCkPem cHandle);` | | `NumPublicKeys` | property, read-only | `int CkPem_getNumPublicKeys(HCkPem cHandle);` | | `PrivateKeyFormat` | property, read/write | `void CkPem_getPrivateKeyFormat(HCkPem cHandle, HCkString retval); void CkPem_putPrivateKeyFormat(HCkPem cHandle, const char *newVal); const char *CkPem_privateKeyFormat(HCkPem cHandle);` | | `PublicKeyFormat` | property, read/write | `void CkPem_getPublicKeyFormat(HCkPem cHandle, HCkString retval); void CkPem_putPublicKeyFormat(HCkPem cHandle, const char *newVal); const char *CkPem_publicKeyFormat(HCkPem cHandle);` | | `AddCert` | method | `BOOL CkPem_AddCert(HCkPem cHandle, HCkCert cert, BOOL includeChain);` | | `AddItem` | method | `BOOL CkPem_AddItem(HCkPem cHandle, const char *itemType, const char *encoding, const char *itemData);` | | `AddP7b` | method | `BOOL CkPem_AddP7b(HCkPem cHandle, HCkBinData bd);` | | `AddPrivateKey` | method | `BOOL CkPem_AddPrivateKey(HCkPem cHandle, HCkPrivateKey privateKey);` | | `AddPrivateKey2` | method | `BOOL CkPem_AddPrivateKey2(HCkPem cHandle, HCkPrivateKey privKey, HCkCertChain certChain);` | | `AddPublicKey` | method | `BOOL CkPem_AddPublicKey(HCkPem cHandle, HCkPublicKey pubkey);` | | `CertAt` | method | `BOOL CkPem_CertAt(HCkPem cHandle, int index, HCkCert cert);` | | `Clear` | method | `BOOL CkPem_Clear(HCkPem cHandle);` | | `GetEncodedItem` | method | `BOOL CkPem_GetEncodedItem(HCkPem cHandle, const char *itemType, const char *itemSubType, const char *encoding, int index, HCkString outStr); const char *CkPem_getEncodedItem(HCkPem cHandle, const char *itemType, const char *itemSubType, const char *encoding, int index);` | | `LoadP7bFile` | method | `BOOL CkPem_LoadP7bFile(HCkPem cHandle, const char *path);` | | `LoadPem` | method | `BOOL CkPem_LoadPem(HCkPem cHandle, const char *pemContent, const char *password);` | | `LoadPemFile` | method | `BOOL CkPem_LoadPemFile(HCkPem cHandle, const char *path, const char *password);` | | `LoadTaskCaller` | method | `BOOL CkPem_LoadTaskCaller(HCkPem cHandle, HCkTask task);` | | `PrivateKeyAt` | method | `BOOL CkPem_PrivateKeyAt(HCkPem cHandle, int index, HCkPrivateKey privKey);` | | `PublicKeyAt` | method | `BOOL CkPem_PublicKeyAt(HCkPem cHandle, int index, HCkPublicKey pubKey);` | | `RemoveCert` | method | `BOOL CkPem_RemoveCert(HCkPem cHandle, int index);` | | `RemovePrivateKey` | method | `BOOL CkPem_RemovePrivateKey(HCkPem cHandle, int index);` | | `ToJksObj` | method | `BOOL CkPem_ToJksObj(HCkPem cHandle, const char *aliasName, const char *password, HCkJavaKeyStore jksObj);` | | `ToPem` | method | `BOOL CkPem_ToPem(HCkPem cHandle, HCkString outStr); const char *CkPem_toPem(HCkPem cHandle);` | | `ToPemEx` | method | `BOOL CkPem_ToPemEx(HCkPem cHandle, BOOL extendedAttrs, BOOL noKeys, BOOL noCerts, BOOL noCaCerts, const char *encryptAlg, const char *password, HCkString outStr); const char *CkPem_toPemEx(HCkPem cHandle, BOOL extendedAttrs, BOOL noKeys, BOOL noCerts, BOOL noCaCerts, const char *encryptAlg, const char *password);` | | `ToPfxObj` | method | `BOOL CkPem_ToPfxObj(HCkPem cHandle, HCkPfx pfxObj);` | Deprecated members are listed at the end of this file with their replacements; do not use them in new code. ## Properties ### Pem.AppendMode `Chilkat 11.7.0 · c · Pem · AppendMode · property · read/write · since 9.5.0.49` ```c BOOL CkPem_getAppendMode(HCkPem cHandle); void CkPem_putAppendMode(HCkPem cHandle, BOOL newVal); ``` When set to `TRUE`, each of the Load\* methods appends to the current contents of this PEM object. When set to `FALSE`, a Load\* method replaces the contents of this PEM object. The default is `FALSE`. ### Pem.HeartbeatMs `Chilkat 11.7.0 · c · Pem · HeartbeatMs · property · read/write · since 9.5.0.49` ```c int CkPem_getHeartbeatMs(HCkPem cHandle); void CkPem_putHeartbeatMs(HCkPem cHandle, int newVal); ``` **Full documentation for this property (same in every language):** [Event Callback Examples](https://www.chilkatsoft.com/ai-docs/v/11.7.0/articles/event_callback_examples.md) The interval in milliseconds between each `AbortCheck` event callback, which enables an application to abort certain method calls before they complete. **By default, HeartbeatMs is set to** `0`**, meaning no AbortCheck event callbacks will trigger.** ### Pem.NumCerts `Chilkat 11.7.0 · c · Pem · NumCerts · property · read-only · since 9.5.0.49` ```c int CkPem_getNumCerts(HCkPem cHandle); ``` The number of certificates in the loaded PEM. To get the 1st certificate, call GetCert(0). ### Pem.NumCrls `Chilkat 11.7.0 · c · Pem · NumCrls · property · read-only · since 9.5.0.77` ```c int CkPem_getNumCrls(HCkPem cHandle); ``` The number of certificate revocation lists (CRLs) in the loaded PEM. ### Pem.NumCsrs `Chilkat 11.7.0 · c · Pem · NumCsrs · property · read-only · since 9.5.0.50` ```c int CkPem_getNumCsrs(HCkPem cHandle); ``` The number of certificate signing requests (CSRs) in the loaded PEM. ### Pem.NumPrivateKeys `Chilkat 11.7.0 · c · Pem · NumPrivateKeys · property · read-only · since 9.5.0.49` ```c int CkPem_getNumPrivateKeys(HCkPem cHandle); ``` The number of private keys in the loaded PEM. To get the 1st private key, call GetPrivateKey(0). ### Pem.NumPublicKeys `Chilkat 11.7.0 · c · Pem · NumPublicKeys · property · read-only · since 9.5.0.49` ```c int CkPem_getNumPublicKeys(HCkPem cHandle); ``` The number of public keys in the loaded PEM. To get the 1st public key, call GetPublicKey(0). ### Pem.PrivateKeyFormat `Chilkat 11.7.0 · c · Pem · PrivateKeyFormat · property · read/write · since 9.5.0.49` ```c void CkPem_getPrivateKeyFormat(HCkPem cHandle, HCkString retval); void CkPem_putPrivateKeyFormat(HCkPem cHandle, const char *newVal); const char *CkPem_privateKeyFormat(HCkPem cHandle); ``` Controls the format to be used for **unencrypted** private keys when writing a PEM. Possible values are `pkcs1` and `pkcs8`. (OpenSSL typically uses the `pkcs8` format.) When writing encrypted private keys to PEM, the format is always PKCS8, and the PEM header is `BEGIN ENCRYPTED PRIVATE KEY`. The default is `pkcs8`. The PKCS1 format uses the PEM header: BEGIN RSA PRIVATE KEY. The PKCS8 format uses the PEM header: BEGIN PRIVATE KEY. ### Pem.PublicKeyFormat `Chilkat 11.7.0 · c · Pem · PublicKeyFormat · property · read/write · since 9.5.0.49` ```c void CkPem_getPublicKeyFormat(HCkPem cHandle, HCkString retval); void CkPem_putPublicKeyFormat(HCkPem cHandle, const char *newVal); const char *CkPem_publicKeyFormat(HCkPem cHandle); ``` Controls the format to be used for public keys when writing a PEM. Possible values are `pkcs1` and `pkcs8`. (OpenSSL typically uses the `pkcs8` format.) The default is `pkcs8`. The PKCS1 format uses the PEM header: BEGIN RSA PUBLIC KEY. The PKCS8 format uses the PEM header: BEGIN PUBLIC KEY. ## Methods ### Pem.AddCert `Chilkat 11.7.0 · c · Pem · AddCert · method · since 9.5.0.49` ```c BOOL CkPem_AddCert(HCkPem cHandle, HCkCert cert, BOOL includeChain); ``` Adds a certificate, and potentially the certs in its chain of authentication to the PEM. If `includeChain` is `TRUE`, then certificates in the `cert`'s chain of authentication up to and including the root are automatically added. Returns TRUE for success, FALSE for failure. ### Pem.AddItem `Chilkat 11.7.0 · c · Pem · AddItem · method · since 9.5.0.59` ```c BOOL CkPem_AddItem(HCkPem cHandle, const char *itemType, const char *encoding, const char *itemData); ``` Adds a certificate, private key, public key, or csr to the PEM. The possible values for `itemType` are `certificate` (or `cert`), `privateKey`, `publicKey`, or `csr`. The `encoding` can be `Base64`, `modBase64`, `Base32`, `QP` (for quoted-printable), `URL` (for url-encoding), `Hex`, `url_oauth`, `url_rfc1738`, `url_rfc2396`, and `url_rfc3986`. The `itemData` contains the ASN.1 data in string format according to the encoding specified in `encoding`. Returns TRUE for success, FALSE for failure. ### Pem.AddP7b `Chilkat 11.7.0 · c · Pem · AddP7b · method · since 11.0.0` ```c BOOL CkPem_AddP7b(HCkPem cHandle, HCkBinData bd); ``` Loads the PEM from the contents of an PKCS7 container (.p7b) contained in `bd`. A .p7b (or .p7c) file contains a PKCS#7 container, which may include: - One or more X.509 certificates (a certificate chain) - Optionally, CRLs (Certificate Revocation Lists) - No private key Common Use: Used to bundle intermediate and root certificates for things like SSL certificate chains. Returns TRUE for success, FALSE for failure. ### Pem.AddPrivateKey `Chilkat 11.7.0 · c · Pem · AddPrivateKey · method · since 9.5.0.49` ```c BOOL CkPem_AddPrivateKey(HCkPem cHandle, HCkPrivateKey privateKey); ``` Adds a private key to the PEM object. Returns TRUE for success, FALSE for failure. ### Pem.AddPrivateKey2 `Chilkat 11.7.0 · c · Pem · AddPrivateKey2 · method · since 9.5.0.49` ```c BOOL CkPem_AddPrivateKey2(HCkPem cHandle, HCkPrivateKey privKey, HCkCertChain certChain); ``` Adds a private key and it's associated certificate chain to the PEM object. Returns TRUE for success, FALSE for failure. ### Pem.AddPublicKey `Chilkat 11.7.0 · c · Pem · AddPublicKey · method · since 9.5.0.49` ```c BOOL CkPem_AddPublicKey(HCkPem cHandle, HCkPublicKey pubkey); ``` Adds a public key to the PEM object. Returns TRUE for success, FALSE for failure. ### Pem.CertAt `Chilkat 11.7.0 · c · Pem · CertAt · method · since 11.0.0` ```c BOOL CkPem_CertAt(HCkPem cHandle, int index, HCkCert cert); ``` Returns in `cert` the Nth certificate from the PEM. The first certificate is at index 0. Returns TRUE for success, FALSE for failure. ### Pem.Clear `Chilkat 11.7.0 · c · Pem · Clear · method · since 9.5.0.49` ```c BOOL CkPem_Clear(HCkPem cHandle); ``` Removes all content from this PEM object. Returns TRUE for success, FALSE for failure. ### Pem.GetEncodedItem `Chilkat 11.7.0 · c · Pem · GetEncodedItem · method · since 9.5.0.50` ```c BOOL CkPem_GetEncodedItem(HCkPem cHandle, const char *itemType, const char *itemSubType, const char *encoding, int index, HCkString outStr); const char *CkPem_getEncodedItem(HCkPem cHandle, const char *itemType, const char *itemSubType, const char *encoding, int index); ``` Returns the encoded contents of the Nth item of a particular type (0-based `index`). The possible values for `itemType` are `certificate` (or `cert`), `privateKey`, `publicKey`, or `csr`. Input string args are case-insensitive. If the `itemType` is `privateKey`, the `itemSubType` may be `der` or `pkcs8`. If the `itemType` is `publicKey`, the `itemSubType` may be `der` or `pkcs1`. The `itemSubType` is ignored for other values of `itemType`. The valid `encoding` modes are `Base64`, `modBase64`, `Base32`, `Base58`, `QP` (for quoted-printable), `URL` (for url-encoding), `Hex`, `url_oauth`, `url_rfc1738`, `url_rfc2396`, and `url_rfc3986`. Returns TRUE for success, FALSE for failure. ### Pem.LoadP7bFile `Chilkat 11.7.0 · c · Pem · LoadP7bFile · method · since 9.5.0.49` ```c BOOL CkPem_LoadP7bFile(HCkPem cHandle, const char *path); ``` Loads the contents of a PKCS7 container (.p7b file). Returns TRUE for success, FALSE for failure. ### Pem.LoadPem `Chilkat 11.7.0 · c · Pem · LoadPem · method · since 9.5.0.49` ```c BOOL CkPem_LoadPem(HCkPem cHandle, const char *pemContent, const char *password); ``` Loads the PEM from a PEM string. If encrypted, then the `password` is required for decryption. Otherwise, an empty string (or any string) may be passed for the `password`. Returns TRUE for success, FALSE for failure. ### Pem.LoadPemFile `Chilkat 11.7.0 · c · Pem · LoadPemFile · method · since 9.5.0.49` ```c BOOL CkPem_LoadPemFile(HCkPem cHandle, const char *path, const char *password); ``` Loads the PEM from a PEM file. If encrypted, then the `password` is required for decryption. Otherwise, an empty string (or any string) may be passed for the `password`. Returns TRUE for success, FALSE for failure. ### Pem.LoadTaskCaller `Chilkat 11.7.0 · c · Pem · LoadTaskCaller · method · since 9.5.0.80` ```c BOOL CkPem_LoadTaskCaller(HCkPem cHandle, HCkTask task); ``` Loads the caller of the task's async method. Returns TRUE for success, FALSE for failure. ### Pem.PrivateKeyAt `Chilkat 11.7.0 · c · Pem · PrivateKeyAt · method · since 11.0.0` ```c BOOL CkPem_PrivateKeyAt(HCkPem cHandle, int index, HCkPrivateKey privKey); ``` Returns in `privKey` the Nth private key from the PEM. The first private key is at index 0. Returns TRUE for success, FALSE for failure. ### Pem.PublicKeyAt `Chilkat 11.7.0 · c · Pem · PublicKeyAt · method · since 11.0.0` ```c BOOL CkPem_PublicKeyAt(HCkPem cHandle, int index, HCkPublicKey pubKey); ``` Returns in `pubKey` the Nth public key from the PEM. The first public key is at index 0. Returns TRUE for success, FALSE for failure. ### Pem.RemoveCert `Chilkat 11.7.0 · c · Pem · RemoveCert · method · since 9.5.0.49` ```c BOOL CkPem_RemoveCert(HCkPem cHandle, int index); ``` Removes the Nth certificate from the PEM. The first certificate is at index 0. Returns TRUE for success, FALSE for failure. ### Pem.RemovePrivateKey `Chilkat 11.7.0 · c · Pem · RemovePrivateKey · method · since 9.5.0.49` ```c BOOL CkPem_RemovePrivateKey(HCkPem cHandle, int index); ``` Removes the Nth private key from the PEM. The first private key is at index 0. Returns TRUE for success, FALSE for failure. ### Pem.ToJksObj `Chilkat 11.7.0 · c · Pem · ToJksObj · method · since 11.0.0` ```c BOOL CkPem_ToJksObj(HCkPem cHandle, const char *aliasName, const char *password, HCkJavaKeyStore jksObj); ``` This function converts this PEM to a Java KeyStore (JKS) object and stores it in `jksObj`. If `aliasName` is provided, it will be used as the alias for the first object in the PEM (either a private key or certificate), while subsequent objects will receive autogenerated aliases. The resulting JKS will be encrypted with `password`, unless the PEM contains only certificates, in which case `password` is not used. Returns TRUE for success, FALSE for failure. ### Pem.ToPem `Chilkat 11.7.0 · c · Pem · ToPem · method · since 9.5.0.47` ```c BOOL CkPem_ToPem(HCkPem cHandle, HCkString outStr); const char *CkPem_toPem(HCkPem cHandle); ``` Write the PFX to a PEM formatted string. The resultant PEM will contain the private key, as well as the certs in the chain of authentication (or whatever certs are available in the PFX). For example: ``` -----BEGIN RSA PRIVATE KEY----- ... ... the private key associated with the main certificate. ... -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- ... ... the main certificate ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ... ... an intermediate CA certificate (if present) ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ... ... the root CA certificate ... -----END CERTIFICATE----- ``` Returns TRUE for success, FALSE for failure. ### Pem.ToPemEx `Chilkat 11.7.0 · c · Pem · ToPemEx · method · since 9.5.0.49` ```c BOOL CkPem_ToPemEx(HCkPem cHandle, BOOL extendedAttrs, BOOL noKeys, BOOL noCerts, BOOL noCaCerts, const char *encryptAlg, const char *password, HCkString outStr); const char *CkPem_toPemEx(HCkPem cHandle, BOOL extendedAttrs, BOOL noKeys, BOOL noCerts, BOOL noCaCerts, const char *encryptAlg, const char *password); ``` Write the PFX to a PEM formatted string. If `extendedAttrs` is `TRUE`, then extended properties (Bag Attributes and Key Attributes) are output. If `noKeys` is `TRUE`, then no private keys are output. If `noCerts` is `TRUE`, then no certificates are output. If `noCaCerts` is `TRUE`, then no CA certs or intermediate CA certs are output. If `encryptAlg` is not empty, it indicates the encryption algorithm to be used for encrypting the private keys (otherwise the private keys are output unencrypted). The possible choices for the `encryptAlg` are `des3`, `aes128`, `aes192`, and `aes256`. (All encryption algorithm choices use CBC mode.) If the private keys are to be encrypted, then `password` is the password to be used. Otherwise, `password` may be left empty. For example: ``` Bag Attributes Microsoft Local Key set: localKeyID: 01 00 00 00 friendlyName: le-2b09a3d2-9037-4a05-95cc-4d44518e8607 Microsoft CSP Name: Microsoft RSA SChannel Cryptographic Provider Key Attributes X509v3 Key Usage: 10 -----BEGIN RSA PRIVATE KEY----- ... ... the private key associated with the main certificate. ... -----END RSA PRIVATE KEY----- Bag Attributes localKeyID: 01 00 00 00 1.3.6.1.4.1.311.17.3.92: 00 08 00 00 1.3.6.1.4.1.311.17.3.20: C2 53 54 F3 ... 1.3.6.1.4.1.311.17.3.71: 49 00 43 00 ... 1.3.6.1.4.1.311.17.3.75: 31 00 42 00 ... subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=something.com issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA -----BEGIN CERTIFICATE----- ... ... the main certificate ... -----END CERTIFICATE----- ... -----BEGIN CERTIFICATE----- ... ... an intermediate CA certificate (if present) ... -----END CERTIFICATE----- ... -----BEGIN CERTIFICATE----- ... ... the root CA certificate ... -----END CERTIFICATE----- ``` Returns TRUE for success, FALSE for failure. ### Pem.ToPfxObj `Chilkat 11.7.0 · c · Pem · ToPfxObj · method · since 11.0.0` ```c BOOL CkPem_ToPfxObj(HCkPem cHandle, HCkPfx pfxObj); ``` Converts this PEM object, which must contain at least one private key, to PKCS12 and returns the PFX in `pfxObj`. Typically, a PKCS12 file includes one private key, its associated certificate, and the certificate chain. Returns TRUE for success, FALSE for failure. ## Deprecated members — do not use in new code | Member | Kind | Deprecated in | Use instead | |---|---|---|---| | `GetCert` | method | before 11.6.1 | `CertAt` | | `GetPrivateKey` | method | before 11.6.1 | `PrivateKeyAt` | | `GetPublicKey` | method | before 11.6.1 | `PublicKeyAt` | | `LoadP7b` | method | before 11.6.1 | — | | `ToJks` | method | before 11.6.1 | `ToJksObj` | | `ToPfx` | method | before 11.6.1 | `ToPfxObj` | ## Related classes [`BinData`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/BinData.md), [`Cert`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/Cert.md), [`CertChain`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/CertChain.md), [`JavaKeyStore`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/JavaKeyStore.md), [`Pfx`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/Pfx.md), [`PrivateKey`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/PrivateKey.md), [`PublicKey`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/PublicKey.md), [`Task`](https://www.chilkatsoft.com/ai-docs/v/11.7.0/c/classes/Task.md)