SAMPLE PKCS#12 Keystore — Key + Full Chain
A password-protected PKCS#12 keystore holding the SAMPLE leaf key together with its whole issuing chain, so one import gives a client both an identity and its anchors. The password `novus-p7-sample-p12` is published on purpose; nothing inside is a real credential.
| Field | Value |
|---|---|
| Type | PKCS#12 / PFX keystore (binary) |
| Password | novus-p7-sample-p12 (published SAMPLE password) |
| Private key | RSA-2048, leaf.pki.sample.example |
| Certificate | leaf.pki.sample.example 0x701001 |
| CA certificates | SAMPLE Issuing CA I2, SAMPLE Root CA R1 |
| Friendly name | novus-p7-sample |
| Bytes | 5986 |
Specifications
- Format
- PKCS#12 (PFX)
- Password
- novus-p7-sample-p12
- Friendly Name
- novus-p7-sample
- Contains
- RSA-2048 leaf key + leaf, intermediate, and root certificates
- Pinned
- PKCS#12 KDF salts are per-run random, so these bytes are pinned in the generator
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Import the keystore with password `novus-p7-sample-p12` and list its aliases.
- Expected result
- Import succeeds and exposes one private-key entry plus a three-certificate chain from leaf to SAMPLE root.
What is a .p12 file?
A .p12 file is a PKCS#12 (PFX) bundle — a password-protected binary archive that packages a certificate together with its private key (and optionally a chain) in one importable file. It is the standard way to move a complete TLS or client identity between systems.
How to use this file
Use an example .p12 to test PKCS#12 parsers and importers, keystore tooling, and password-protected bundle handling. The sample password is documented on the file's page; this is published sample material, not a real identity.
How to use this file for testing
“SAMPLE PKCS#12 Keystore — Key + Full Chain” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117 · PKCS#12 (PFX). Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.
- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.
- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.
- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.
- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.
- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.
Generated by generation/security_p7.py. Free for any use, no attribution required — license.