Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file, all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Each card starts with one representative test file. Choose a use case, search, or filter to find a specific profile; a card’s variant menu contains its related samples.
42 test families · 97 available files · Page 1 of 3
Security
A PKCS#10 certificate signing request (PEM) with the subject and SAN, self-signed by the RSA key to prove key possession, for testing CSR parsers and certificate-authority intake flows.
Pki
SAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.
Provenance
An ASCII-armored detached signature block of the shape that accompanies a SHA256SUMS file. It is a SAMPLE placeholder, not a valid OpenPGP signature: armor detectors will find it, verifiers must reject it. Signatures, ke
Security
An Ed25519 private key in PKCS#8 PEM, derived from a fixed seed: a published, sample-only modern elliptic-curve key for testing PEM parsers and Ed25519 tooling. Never use it for real.
Pki
Deterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.
Pki
Password-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.
Htpasswd
SAMPLE htpasswd using Apache APR1 MD5-style hash for legacy Basic-auth tests.
Htpasswd
SAMPLE htpasswd with a bcrypt hash line for Basic-auth file parsers.
Security
An Apache/nginx .htpasswd file with two users hashed using the {SHA} scheme (Base64 SHA-1): the sample passwords are documented in the file, for testing Basic-Auth credential parsers and hash identification.
Htpasswd
Multi-user SAMPLE htpasswd mixing bcrypt, APR1, and {SHA} lines for algorithm-detection tests.
Pgp
ASCII-armored SAMPLE-shaped PGP public key placeholder for armor detectors (not a cryptographically valid key).
Pki
PKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.
Security
A PKCS#12 (.p12/PFX) bundle packaging the sample RSA key and certificate together, protected with the sample password 'novus-sample', for testing keystore importers and PKCS#12 parsers. (The PKCS#12 MAC salt is random, s
Pki
SAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.
Security
A 2048-bit RSA private key in unencrypted PKCS#8 PEM: a deliberately PUBLISHED, sample-only key for testing PEM key parsers and PKCS#8 decoders. Never use it for anything real.
Pki
The two CA certificates concatenated in trust-store order, the shape a `--cafile` or `ca-bundle.crt` argument expects. Point a client at this and every other valid p7 leaf becomes verifiable.
Pki
Binary DER twin of the SAMPLE CRL: the exact encoding a CRL distribution point serves over HTTP. Use it to test binary CRL fetching and caching paths that never see PEM armour.
Pki
A mutual-TLS client certificate: EC P-256 subject key, clientAuth EKU only, and an OU naming the fictional access group. Present it to an mTLS endpoint to test client-certificate parsing and EKU enforcement.
