pem5.5 KB

SAMPLE Chain — Leaf + Intermediate + Root

The same chain with the self-signed root appended. Sending the root is legal and common, merely wasteful, so a verifier must ignore the extra anchor rather than treat it as an error.

Certificate & key testing

Preview — first 50 linespem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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… 93 lines total — download for the full file.

Specifications

Certs: 3
Order: leaf, intermediate, root
Note: root included (wasteful but legal)
Sample Only: true
Seed: 70117

Testing contract

Expected to pass

Scenario: Feed the three-certificate bundle to a path builder that already trusts the SAMPLE root.
Expected result: Validation succeeds and the redundant self-signed root is ignored, not counted as an extra path length.

What is a .pem file?

PEM (Privacy-Enhanced Mail) is a text container that Base64-encodes DER binary data between BEGIN/END header lines, used to hold X.509 certificates, certificate requests, and keys. A single .pem file may contain a certificate, a chain, or a private key, which makes it the most common format for TLS material.

How to use this file

Use an example .pem certificate to test X.509 and TLS parsers, PEM decoders, certificate-chain validators, and PEM-to-DER converters. This is published sample material — never a real production key.

How to use this file for testing

“SAMPLE Chain — Leaf + Intermediate + Root” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.

Documented properties for this file: seed 70117. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.

Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.

This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.

This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.