EC, not RSA. RSA would *never* allow something like that.

It would need to be a 3, 5, or 7, since a prime is required.

You can't do that because an RSA private key contains two numbers - the modulus and the exponent. Even better, an RSA private key usually has the modulus stored as its two factors rather than their product.

Also note that using small numbers like 65537 for RSA public exponents is common practice.

That's INSANE

Like, that had to be malicious right? ssh-keygen won't generate a key like this, and neither will openssl or whatever Microsoft is doing behind their CA server.

https://www.youtube.com/watch?v=u8ccGjar4Es

-----BEGIN PRIVATE KEY----- MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAShZANiAAQTglHNUqyS mMHIqtl3Mh3rl+cJvQtMoKylXcitUdz8nRWJoVl+OlEg4e/WMcY+GDXKyuKYaaYu FjHoooGBq1ZhbcRdkYq8CfOrDmPPeSqk3O1zh743u6VpVJ8cArJw7Wc= -----END PRIVATE KEY-----

The key needs to mention which curve it is using.

> -----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----

The "4" would be valid in hex, decimal, and even octal.

BEGIN EC PRIVATE KEY, surely?

I don’t see a problem. Isn’t that the official random number?

https://xkcd.com/221

We don't know what passwords other CAs have.

technical accuracy aside, this made me giggle like a madman

Annoyed that you've posted this, now I need to go increment all the private keys on my servers. >:(

[flagged]