SAMPLE RSA Public Key — PKCS#1
The same modulus and exponent in the raw PKCS#1 RSAPublicKey container, without the algorithm-identifier wrapper. Libraries routinely accept one armour and reject the other, so the pair is the test.
-----BEGIN RSA PUBLIC KEY-----
MIIBCgKCAQEAvFQ+FKvpOhgmcptUhCZk9Qi/Lc9ginBBdHVVfX7GBD1Lre3h2zBK
0ZuqzKhrXjag+hMcyRVolyoPnfpCGmn+Jr2QtPAE0UjuG07wWf1I6dhg7dPHjkeW
AEzDqT2tb244jnYKVPVzTj7X6L3BUveZfFiKqzGZp2peQSJ56Coe13XSRdtDUtoG
1VYu50Ps9QJR6oKv9b0ujuKc7dhL/ea6vWrcgVLggKj02auQehLqZ8HOasmxPpr/
LW0kcEwCShbHPc2qkgZ7YqNocxbSB9AdO1Fn3GRVAcY1huI3nLPQ4xL7bzmiinyE
ac0nPRfcyzIrtZI/3LHaNrW7lSbMWX+9twIDAQAB
-----END RSA PUBLIC KEY-----
Specifications
- Algorithm
- RSA
- Bits
- 2048
- Format
- PKCS#1 RSAPublicKey
- Armour
- BEGIN RSA PUBLIC KEY
- Note
- no algorithm identifier wrapper
- Sample Only
- true
- Seed
- 70117
Testing contract
Expected to pass- Scenario
- Load both public-key files in the library under test and compare the parsed modulus.
- Expected result
- Both yield the same 2048-bit modulus and exponent 65537, or the library reports clearly which armour it cannot read.
What is a .pem file?
PEM (Privacy-Enhanced Mail) is a text container that Base64-encodes DER binary data between BEGIN/END header lines, used to hold X.509 certificates, certificate requests, and keys. A single .pem file may contain a certificate, a chain, or a private key, which makes it the most common format for TLS material.
How to use this file
Use an example .pem certificate to test X.509 and TLS parsers, PEM decoders, certificate-chain validators, and PEM-to-DER converters. This is published sample material — never a real production key.
How to use this file for testing
“SAMPLE RSA Public Key — PKCS#1” is a deterministic Novus Examples fixture for Certificate & key testing, Conversion testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 70117 · RSA · PKCS#1 RSAPublicKey. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- derSAMPLE Certificate Revocation List (DER)Binary DER twin of the SAMPLE CRL — the exact encoding a CRL distribution point serves over HTTP. Use it to test binary CRL fetching and caching paths that never see PEM armour.

- keySAMPLE EC P-256 Private Key — SEC 1The same P-256 scalar in the SEC 1 container (BEGIN EC PRIVATE KEY), which names the curve inline instead of through a PKCS#8 algorithm identifier. Some deployment tools accept only one of the two.

- derSAMPLE Intermediate CA Certificate (DER)Binary DER encoding of the SAMPLE intermediate CA certificate — the same bytes the PEM twin Base64-wraps. Feed it to ASN.1 decoders, Java keystores, and DER-to-PEM converters.

- derSAMPLE Leaf Certificate (DER)Binary DER encoding of the SAMPLE leaf certificate — the same bytes the PEM twin Base64-wraps. Feed it to ASN.1 decoders, Java keystores, and DER-to-PEM converters.

- derSAMPLE PKCS#7 Certificate Bundle (DER)Binary DER form of the same three-certificate PKCS#7 bundle, the encoding a .p7b download actually uses. Use it to test importers that never see the PEM armour.

- pemSAMPLE PKCS#7 Certificate Bundle (PEM)A degenerate (certificates-only) PKCS#7 structure holding all three SAMPLE certificates under BEGIN PKCS7 armour — the payload Windows and Java tools distribute as a .p7b. It carries no private key and no signature over any content.

Generated by generation/security_p7.py. Free for any use, no attribution required — license.