RSA-2048 Private Key (PEM) — SAMPLE
Published SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDCMAFtle+rk/e2
U5ffNMs7R7JrTSObX2HCrlnv+lBVVftOChsTWePbStjvkAe02msQtrjY6AUymHB0
Z/uA2nfQqxxKv70l9j8Gf/DLHLWKZ3h8X0S5hMtjyvDMb7Cuupl9DfL4eGJQiu0s
Zyjbwzi2YTCPJ33mLpGR6ORSdjeeZ56mGYapvFAM8/wyFz5Pjxwya51XrQfmXI4v
zTNK5+t/H4BTNq1TH0qKal2fSTtxtoSMV7aPzPzJp3b2YPA8IQQmmXIwfVT0AR4d
LC/vVCs3dEwdX5TA1qamvFY16aGdy83dTepe55QsIrPFXG/BhYoqzwcU7uO/Gr5b
6fxwIrGtAgMBAAECggEAEpqaltI6cKo2HVIoTS3K8+ZCpvpwP5AlfT5kU6Do6SjZ
8P6Rdhel3ecJHis8cCx/ls2iq1xpm92ar63paWb3+2/0ctbblLnHc2R2s2B2ctWT
gS4RY/xGDhmUKBau1/aWaOXMUgpNuC179N9g1mxMHSQpJk95+NkCTXcBLnZ9jdMK
fz/6YzpS4MFfCedm/0527ajm7uIwYpGcqA24sfYCC0uDUbldmPcCo3GjQl/xdGIw
GCM2jzWdub/5h0sl04SvMuemgDXpV5caxH8otoEN59jBkto49/v0AKCtxS26Xj/X
7+GMrT9EmzdUcNWzfCDKpRR6+SmIOet2Tk2tIh4bEwKBgQDykIzwyU1/Zzesx6PZ
IuCgS3UIv3zp7d0KZ3wlTSNCmIpwlLLNVu3xNEVy2BzbU2V0M2W1g9k6ML1o/8Pm
IHqjgwKn0wm0w+UJVlxJeMoWfgthlMvyRfYjwV7kjd385gEGoBxV6a7z2qS9U32D
0vd9OSbN8eZRR3YT+5kJxDhddwKBgQDM8X2g46EFuvbGSB1FVbA1Dvr+CqcMZ0ch
C2J4hemVWJGBaswJrI4ZRrRcEqO6eESPS+foq/tz2aUmQc2wUdDsVcrl2f/vVwzD
uXADuBEPDop1hgEMLMrL2O4aDcUAsKPcePV9oBJRa2n1DUQvHr/PjbbAn38IqEgS
13BL74Ti+wKBgAHMfJ8UfxSgyVLosBheH9hQdu+3q894ShlXpx4Hsmk+BFjNYX4Q
VPdi8djmLWCa/7ea4fg0oBnEXsM2kldUilRIFm70K7BBe6NUFp8c3DLKgH8awWBs
kGS3fGKpgqnrcrp/2XXxo7B/QJV+1wFxQRCWqekBEDouE3wWc44U/G4FAoGAIHji
/usSSGYnU6N5f9Lj6IRHIJlvfneevY2gPJh7Oj6eT3MsgRvmJ/sb+Lq7VoBX3Jya
UjNt1B1YHYevn5BXGhs92s1/z9xrGVf4d55ilZAoQBbLc7JlL4dfsqEb5dAXJofD
3fPO8zehwkIn249ztN8vZbXf2u9O/C1GjcGVvKECgYEAoaLZsFvjIYKqvs2f0CDf
DP//HWMSC9B/WpfzxuiV0eCqQcfieivFLxByzZUTSP/Bu/Kp2XnznEkg/z2expqQ
xo+jmbQ1FIwqEicA+5tEeUk2/Lsh6jwVC4ei+X/Zml4SpBPJl/oRyM2NJkAq8ctX
nnCdsCW/3PN4IWdJt125xks=
-----END PRIVATE KEY-----
Specifications
- Algorithm
- RSA
- Bits
- 2048
- Format
- PKCS#8 PEM
- Sample Only
- true
- Seed
- 47001
Testing contract
Expected to pass- Scenario
- Exercise RSA-2048 Private Key (PEM) — SAMPLE in its pki workflow. Published SAMPLE RSA-2048 private key (PKCS#8 PEM).
- Expected result
- 28 text lines, decoded as UTF-8; first nonempty line is '-----BEGIN PRIVATE KEY-----'. Declared feature checks: algorithm=RSA; bits=2048.
What is a .key file?
A .key file holds a private key, usually PEM-encoded in PKCS#8 (BEGIN PRIVATE KEY) or a key-type-specific format. It is the secret half of a TLS or SSH identity and must normally be protected. The examples here are published, sample-only keys that must never be used in production.
How to use this file
Use an example .key to test PEM key parsers, PKCS#8 decoders, and key-format converters (for example PEM to DER or OpenSSH). These are deliberately published sample keys, for parser testing only, never for real use.
How to use this file for testing
“RSA-2048 Private Key (PEM) — SAMPLE” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file, all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 47001 · RSA · PKCS#8 PEM. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such, expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material, never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion, never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.

- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.

- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.

- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.

- pemSAMPLE CA Bundle — Root + IntermediateThe two CA certificates concatenated in trust-store order, the shape a `--cafile` or `ca-bundle.crt` argument expects. Point a client at this and every other valid p7 leaf becomes verifiable.

- pemSAMPLE Certificate Revocation List — EmptyA correctly signed CRL with an absent revokedCertificates field — what a CA publishes when it has revoked nothing. Parsers that assume the list is always present tend to fault here rather than report zero entries.

Generated by generation/security_wave_g.py. Free for any use, no attribution required, license.