SAMPLE Leaf Certificate — Ed25519
The third key-type variant of the reference leaf, carrying an Ed25519 subject public key. Older TLS stacks and keystores reject id-Ed25519 outright, which makes this a compact compatibility probe.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Specifications
- Subject Key
- Ed25519
- Issuer
- Novus Examples SAMPLE Issuing CA I2
- Signature
- sha256WithRSAEncryption
- Serial
- 0x701003
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Load the Ed25519 leaf into the parser or TLS stack under test.
- Expected result
- A modern parser reports an Ed25519 subject key and validates the chain; a stack without RFC 8410 support fails with an unknown-public-key-algorithm error rather than crashing.
What is a .pem file?
PEM (Privacy-Enhanced Mail) is a text container that Base64-encodes DER binary data between BEGIN/END header lines, used to hold X.509 certificates, certificate requests, and keys. A single .pem file may contain a certificate, a chain, or a private key, which makes it the most common format for TLS material.
How to use this file
Use an example .pem certificate to test X.509 and TLS parsers, PEM decoders, certificate-chain validators, and PEM-to-DER converters. This is published sample material — never a real production key.
How to use this file for testing
“SAMPLE Leaf Certificate — Ed25519” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.

- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.

- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.

- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.

- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.

- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.