Skip to content
Novus Examples
der680 B

SAMPLE Certificate Revocation List (DER)

Binary DER twin of the SAMPLE CRL — the exact encoding a CRL distribution point serves over HTTP. Use it to test binary CRL fetching and caching paths that never see PEM armour.

Preview — schema + first 7 rowsder
FieldValue
TypeX.509 CRL v2 (DER)
IssuerCN=Novus Examples SAMPLE Issuing CA I2,O=Novus Examples SAMPLE PKI,C=ZZ
CRL number7
This update2026-05-01T00:00:00Z
Next update2027-05-01T00:00:00Z
Revoked 0x70100c2026-03-01 — keyCompromise
Revoked 0x7010ff2026-04-15 — superseded
PUBLISHED SAMPLE revocation list — fictional CA, fictional serials.

Specifications

Encoding
DER (binary)
Issuer
Novus Examples SAMPLE Issuing CA I2
Crl Number
7
Revoked Count
2
Note
the binary form CRL distribution points actually serve
Sample Only
true
Seed
70117

Testing contract

Expected to pass
Scenario
Fetch or load the DER CRL and compare its parsed contents with the PEM twin.
Expected result
Both encodings produce the same CRL number, update times, and revoked-serial list.

What is a .der file?

DER (Distinguished Encoding Rules) is the binary encoding of an X.509 certificate (or other ASN.1 structure) — the same data a PEM file Base64-wraps, without the text armour. A .der certificate is compact and byte-exact, common in Java keystores and Windows tooling.

How to use this file

Use an example .der certificate to test binary X.509 parsers, ASN.1 decoders, and DER-to-PEM converters, or to confirm a tool reads raw certificate bytes. Published sample certificate, not a real identity.

How to use this file for testing

“SAMPLE Certificate Revocation List (DER)” is a deterministic Novus Examples fixture for Certificate & key testing, Conversion testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.

Documented properties for this file: seed 70117 · DER (binary). Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.

Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.

This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.

This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.