SAMPLE PKCS#7 Detached Signature (DER)
A detached PKCS#7 SignedData over signed-payload.txt, built without signed attributes so the bytes are reproducible. The content is not embedded, so verification needs both files — exactly the failure mode people hit with .p7s email attachments.
| Field | Value |
|---|---|
| Type | PKCS#7 SignedData, detached (DER) |
| Signer | CN=leaf.pki.sample.example,O=Novus Examples SAMPLE PKI,C=ZZ |
| Serial | 0x701001 |
| Digest algorithm | SHA-256 |
| Signed attributes | none |
| Covers | signed-payload.txt |
| Bytes | 1791 |
Specifications
- Format
- PKCS#7 SignedData, detached (DER)
- Digest
- SHA-256
- Signature
- RSA PKCS#1 v1.5
- Signed Attributes
- none (deterministic bytes)
- Signer
- CN=leaf.pki.sample.example
- Covers
- signed-payload.txt
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Verify this signature against signed-payload.txt with the SAMPLE root trusted, then verify it alone.
- Expected result
- Verification succeeds when the payload is supplied and fails with a missing-content error when it is not.
What is a .der file?
DER (Distinguished Encoding Rules) is the binary encoding of an X.509 certificate (or other ASN.1 structure) — the same data a PEM file Base64-wraps, without the text armour. A .der certificate is compact and byte-exact, common in Java keystores and Windows tooling.
How to use this file
Use an example .der certificate to test binary X.509 parsers, ASN.1 decoders, and DER-to-PEM converters, or to confirm a tool reads raw certificate bytes. Published sample certificate, not a real identity.
How to use this file for testing
“SAMPLE PKCS#7 Detached Signature (DER)” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117 · PKCS#7 SignedData, detached (DER). Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.

- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.

- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.

- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.

- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.

- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.