# Sample DER certificate for testing parsers, free and CC0

1 DER test file of 359 B. A direct URL, the file's SHA-256 and CC0, so curl and CI can fetch it with no signup and no keys.

The page: <https://loremfile.dev/der>.

`der/self-signed-ed25519-cert.der` is a sample DER file: a self-signed Ed25519 X.509
certificate for `fixture.example` with no private key, free to hotlink or download.

| Path | Size | MIME | Properties |
|---|---|---|---|
| [`der/self-signed-ed25519-cert.der`](https://loremfile.dev/der/self-signed-ed25519-cert.der) | 359 B | `application/pkix-cert` |  |

DER is the binary encoding of an X.509 certificate: the form a parser actually meets inside a
TLS handshake, a Java keystore or a certificate store, as opposed to the base64 text that gets
pasted into configuration files.

`der/self-signed-ed25519-cert.der` is a self-signed Ed25519 certificate for the reserved name
`fixture.example`, valid from 2020 to 2120 with a fixed serial number. It is byte for byte the
same certificate as the PEM fixture, just without the armour, so you can use the pair to test
that your code converts between the two encodings correctly.

The key is derived from a published seed, which means anyone can rebuild the certificate and
confirm it is what it claims to be. No private key is published, and the certificate names
only a reserved example domain, so it cannot be mistaken for a credential for a real host.

Use it to test certificate parsers, keystore importers and anything that has to detect the
encoding it was handed. Related format: [PEM](https://loremfile.dev/pem).

## Files

| Path | Size | MIME | Properties |
|---|---|---|---|
| [`der/self-signed-ed25519-cert.der`](https://loremfile.dev/der/self-signed-ed25519-cert.der) | 359 B | `application/pkix-cert` |  |

The same list as JSON: <https://loremfile.dev/der/index.json>.
