SAMPLE Certificate Revocation List (PEM)
The issuing CA's revocation list, PEM-armoured, naming the revoked SAMPLE leaf (keyCompromise) plus a second serial with no matching certificate file — because a real CRL lists serials, not certificates. Signed by the same intermediate that issued them.
-----BEGIN X509 CRL-----
MIICpDCCAQwCAQEwDQYJKoZIhvcNAQELBQAwXzELMAkGA1UEBhMCWloxIjAgBgNV
BAoMGU5vdnVzIEV4YW1wbGVzIFNBTVBMRSBQS0kxLDAqBgNVBAMMI05vdnVzIEV4
YW1wbGVzIFNBTVBMRSBJc3N1aW5nIENBIEkyFw0yNjA1MDEwMDAwMDBaFw0yNzA1
MDEwMDAwMDBaMEgwIgIDcBAMFw0yNjAzMDEwMDAwMDBaMAwwCgYDVR0VBAMKAQEw
IgIDcBD/Fw0yNjA0MTUwMDAwMDBaMAwwCgYDVR0VBAMKAQSgLzAtMAoGA1UdFAQD
AgEHMB8GA1UdIwQYMBaAFA/JJEwP3Hm2qrazNxmlTwOQ39D6MA0GCSqGSIb3DQEB
CwUAA4IBgQDEuQt798j7CAghQFX9rd3Da+ltguzre547NlaM1YU94KO0khbLuyxF
RgL6AfqUNLrv/6mEcrkQgeNVz8XghV7jx4nATVas6FWyX55jiYww0ngmM9GVQdxW
nH6zKqykJiTGxO5nSgm5OYLHzH/5cxvgvnwiCXqOgapsVysgNkaXR6m8rmy5L+EI
rBnNXIcvNJVOjJONjkZ9/kcPAO0+RIbCUBg0t2b350i30crc2Wom862H8SlH0gSy
3QFSX5zQRux+srjvdduzvBSl2MEUodEg6CqoBJ0LOjoD7PdQM0pGTfThSSLgx1cj
JPpnIX+enMNik08vqPk2htS7xRkQzkgGHA2iEoeKP8+RQfC78Skuc/ZxPYcEKuOf
o8d1MHEqr6r/2KqpaZmP/GPtGrQkOt0l80nXfwgAh6jQesNf0GyI+oLKmgN81GWo
GFzp+zAa8YlV9g++mqWeq7IZ1Z5aosVfBF1PDn4fZS6/5+Uvo4I0EiUQDZmKRU5W
Bj26pq9MBg4=
-----END X509 CRL-----
Specifications
- Issuer
- Novus Examples SAMPLE Issuing CA I2
- Crl Number
- 7
- Revoked Count
- 2
- Reasons
- keyCompromise, superseded
- This Update
- 2026-05-01
- Next Update
- 2027-05-01
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Parse the CRL, verify its signature against the SAMPLE intermediate, and look up serial 0x70100c.
- Expected result
- The signature verifies and the lookup returns a revoked entry dated 2026-03-01 with reason keyCompromise.
What is a .pem file?
PEM (Privacy-Enhanced Mail) is a text container that Base64-encodes DER binary data between BEGIN/END header lines, used to hold X.509 certificates, certificate requests, and keys. A single .pem file may contain a certificate, a chain, or a private key, which makes it the most common format for TLS material.
How to use this file
Use an example .pem certificate to test X.509 and TLS parsers, PEM decoders, certificate-chain validators, and PEM-to-DER converters. This is published sample material — never a real production key.
How to use this file for testing
“SAMPLE Certificate Revocation List (PEM)” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.
- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.
- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.
- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.
- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.
- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.
Generated by generation/security_p7.py. Free for any use, no attribution required — license.