SAMPLE CSR — RSA with SAN
The CSR shape a modern CA expects: full subject DN, a requested subjectAltName extension, and a self-signature proving possession of the RSA key. Everything a CA intake form needs to parse.
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Specifications
- Format
- PKCS#10 (PEM)
- Key
- RSA-2048
- Signature
- sha256WithRSAEncryption
- San
- csr.pki.sample.example, www.csr.pki.sample.example
- Ou
- SAMPLE Platform
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Submit the CSR to the intake path under test and read back the requested names and key.
- Expected result
- The proof-of-possession signature verifies and both requested SANs plus the RSA-2048 public key are extracted.
What is a .csr file?
A CSR (Certificate Signing Request, PKCS#10) is a PEM-encoded request a party sends to a certificate authority to be issued a certificate. It contains the subject distinguished name and public key, self-signed with the matching private key to prove possession, but has no validity dates or issuer.
How to use this file
Use an example .csr to test CSR parsers, certificate-authority intake flows, and PKCS#10 decoders, or to verify subject and public-key extraction. Sample request only.
How to use this file for testing
“SAMPLE CSR — RSA with SAN” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117 · PKCS#10 (PEM). Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.
- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.
- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.
- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.
- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.
- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.
Generated by generation/security_p7.py. Free for any use, no attribution required — license.