X.509 Certificate (.crt) — Security SAMPLE
Same SAMPLE certificate as .crt (PEM bytes) for tools that expect the CRT extension.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Specifications
- Encoding
- PEM-as-CRT
- Key
- RSA-2048
- Self Signed
- true
- Seed
- 47001
What is a .crt file?
A .crt file holds an X.509 certificate, most often PEM-encoded (Base64 text) though sometimes DER binary. The extension is a convention for the public certificate half of a TLS identity, as opposed to the private .key file. It carries the subject, issuer, validity window, public key, and signature.
How to use this file
Use an example .crt to test certificate parsers, trust-store importers, and TLS tooling, or as input for .crt-to-.pem/.der conversion. Sample material only, self-signed and clearly labelled.
How to use this file for testing
“X.509 Certificate (.crt) — Security SAMPLE” is a deterministic Novus Examples fixture for Certificate & key testing. Self-signed X.509 certificates (PEM, CRT, DER), a CSR, RSA and Ed25519 keys, an SSH public key, a PKCS#12 bundle, and an htpasswd file — all published sample-only material, for testing certificate parsers, TLS tooling, keystore importers, and PEM/DER decoders.
Documented properties for this file: seed 47001 · PEM-as-CRT. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.
This is a published, sample-only certificate/key. Parse it, verify the chain or signature, and test PEM↔DER conversion — never deploy it anywhere real.
Related files
- jsonCRL Metadata JSON — SAMPLESAMPLE CRL metadata JSON (no binary CRL) for revocation-list UI and loader tests.

- keyEd25519 Private Key (PEM) — SAMPLEDeterministic SAMPLE Ed25519 private key for SSH/TLS tooling tests.

- keyEncrypted PKCS#8 RSA Key — SAMPLEPassword-encrypted SAMPLE PKCS#8 private key (password printed in specs) for decrypt-import tests.

- csrPKCS#10 CSR — Security SAMPLEPKCS#10 certificate signing request SAMPLE for CSR parsers and CA tooling smoke tests.

- p12PKCS#12 Bundle (.p12) — SAMPLESAMPLE PKCS#12 keystore (password `novus-sample-wg`) for keystore importer tests. Not byte-stable.

- keyRSA-2048 Private Key (PEM) — SAMPLEPublished SAMPLE RSA-2048 private key (PKCS#8 PEM). Never use for a real identity.

Generated by generation/security_wave_g.py. Free for any use, no attribution required — license.