crt1.9 KB

SAMPLE Root CA Certificate (PEM)

The self-signed root of the Novus Examples SAMPLE certificate hierarchy (RSA-4096, CA:TRUE, no path-length limit). Install it as the only trust anchor to make the rest of this wave's chains verifiable in a sandbox. Fictional issuer — never a real identity.

Certificate & key testing

Preview — first 33 linescrt

Specifications

Role: root CA
Key: RSA-4096
Self Signed: true
Basic Constraints: CA:TRUE
Path Len: none
Validity: 2020-01-01 to 2040-01-01
Serial: 0x700001
Signature: sha256WithRSAEncryption
Sample Only: true
Seed: 70117

Testing contract

Reference control

Scenario: Load the certificate into a test trust store and build a path from any p7 leaf.
Expected result: Parses as an X.509 v3 CA certificate; chain building to any p7 leaf succeeds with this as the only anchor.

What is a .crt file?

A .crt file holds an X.509 certificate, most often PEM-encoded (Base64 text) though sometimes DER binary. The extension is a convention for the public certificate half of a TLS identity, as opposed to the private .key file. It carries the subject, issuer, validity window, public key, and signature.

How to use this file

Use an example .crt to test certificate parsers, trust-store importers, and TLS tooling, or as input for .crt-to-.pem/.der conversion. Sample material only, self-signed and clearly labelled.

How to use this file for testing

“SAMPLE Root CA Certificate (PEM)” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.

Documented properties for this file: seed 70117 · root CA. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.

Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.

This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.

This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.