X.509 Certificate Testing...

Sean Mullan sean.mullan at oracle.com
Fri Sep 16 12:02:28 UTC 2016

The NIST PKITS test suite is a good one and contains a whole bunch of 
certificates/CRLs for testing compliance with RFC 3280: 


On 09/15/2016 07:19 PM, Milton Smith wrote:
> Hi All,
> I'm looking for a set of certificates, self-signed certs, cross-signed
> certs, small chains, large chains, different critical and non-critical
> sections, revoked certs, blacklisted certs, invalid, not yet valid, time
> stamped, etc.  I realize it's difficult to be comprehensive but is there
> anything anyone can recommend for unit tests or CD/CI builds?  Trying to
> avoid creating all this if it exists already.  Thanks!
> Regards,
> Milton

More information about the security-dev mailing list