SAMPLE RSA Private Key — PKCS#1, Unencrypted
The identical key material wrapped in the legacy PKCS#1 container (BEGIN RSA PRIVATE KEY), which omits the algorithm OID that PKCS#8 carries. Diff it against its PKCS#8 twin to see exactly what a container migration changes.
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
Specifications
- Algorithm
- RSA
- Bits
- 2048
- Container
- PKCS#1 (traditional OpenSSL)
- Armour
- BEGIN RSA PRIVATE KEY
- Encrypted
- false
- Note
- same key material as the PKCS#8 twin, different container
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Load both this key and its PKCS#8 twin and compare their RSA private numbers.
- Expected result
- Both containers yield identical modulus, exponents, and primes despite different PEM armour.
What is a .key file?
A .key file holds a private key, usually PEM-encoded in PKCS#8 (BEGIN PRIVATE KEY) or a key-type-specific format. It is the secret half of a TLS or SSH identity and must normally be protected — the examples here are published, sample-only keys that must never be used in production.
How to use this file
Use an example .key to test PEM key parsers, PKCS#8 decoders, and key-format converters (for example PEM to DER or OpenSSH). These are deliberately published sample keys — for parser testing only, never for real use.
How to use this file for testing
“SAMPLE RSA Private Key — PKCS#1, Unencrypted” is a deterministic Novus Examples fixture for Certificate & key testing, Conversion testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117 · RSA. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- derSAMPLE Certificate Revocation List (DER)Binary DER twin of the SAMPLE CRL — the exact encoding a CRL distribution point serves over HTTP. Use it to test binary CRL fetching and caching paths that never see PEM armour.

- derSAMPLE Intermediate CA Certificate (DER)Binary DER encoding of the SAMPLE intermediate CA certificate — the same bytes the PEM twin Base64-wraps. Feed it to ASN.1 decoders, Java keystores, and DER-to-PEM converters.

- derSAMPLE Leaf Certificate (DER)Binary DER encoding of the SAMPLE leaf certificate — the same bytes the PEM twin Base64-wraps. Feed it to ASN.1 decoders, Java keystores, and DER-to-PEM converters.

- derSAMPLE PKCS#7 Certificate Bundle (DER)Binary DER form of the same three-certificate PKCS#7 bundle, the encoding a .p7b download actually uses. Use it to test importers that never see the PEM armour.

- pemSAMPLE PKCS#7 Certificate Bundle (PEM)A degenerate (certificates-only) PKCS#7 structure holding all three SAMPLE certificates under BEGIN PKCS7 armour — the payload Windows and Java tools distribute as a .p7b. It carries no private key and no signature over any content.

- derSAMPLE Root CA Certificate (DER)Binary DER encoding of the SAMPLE root CA certificate — the same bytes the PEM twin Base64-wraps. Feed it to ASN.1 decoders, Java keystores, and DER-to-PEM converters.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.