diff --git a/lib/hx509/data/kdc.crt b/lib/hx509/data/kdc.crt
new file mode 100644
index 000000000..f2605e353
--- /dev/null
+++ b/lib/hx509/data/kdc.crt
@@ -0,0 +1,57 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7 (0x7)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=hx509 Test Root CA, C=SE
+        Validity
+            Not Before: Apr 28 14:47:49 2006 GMT
+            Not After : Apr 25 14:47:49 2016 GMT
+        Subject: C=SE, CN=kdc
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:dc:aa:8a:2b:7b:8c:84:ed:ea:38:74:d1:7d:08:
+                    83:d8:02:fa:2b:e2:a0:3f:62:b1:e3:0b:18:19:00:
+                    ae:3c:23:a1:0b:ab:c0:ae:02:db:8f:f3:33:a6:0e:
+                    55:42:c6:7e:42:17:7a:ec:5a:6e:b9:b0:52:60:69:
+                    6f:29:3d:e8:90:71:a7:61:78:27:d9:b4:73:7a:e4:
+                    c1:0d:a7:fc:0f:49:01:60:37:cc:f4:1d:de:e2:31:
+                    88:05:4d:ae:b0:82:a0:59:4a:d9:f3:a8:54:3e:08:
+                    b8:7d:4d:4e:3d:30:b4:03:d4:cf:8b:56:2b:02:bc:
+                    04:50:d0:97:80:b5:97:81:25
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Key Usage: 
+                Digital Signature, Non Repudiation, Key Encipherment
+            X509v3 Subject Key Identifier: 
+                22:89:87:7E:8A:5B:C1:16:8E:46:B8:08:D4:F6:28:AA:0A:4C:10:39
+            X509v3 Subject Alternative Name: 
+                othername:<unsupported>
+    Signature Algorithm: sha1WithRSAEncryption
+        93:42:3c:4b:2c:d2:d7:ec:2c:6e:99:fa:74:15:f6:52:ca:5d:
+        03:4f:41:00:f7:9f:00:d7:fb:50:a6:1d:fb:80:16:67:0b:53:
+        f2:6e:b8:8e:60:8e:02:07:e8:29:09:4b:f5:c7:77:b8:22:eb:
+        59:0b:36:ea:01:aa:f9:9f:db:20:e2:c3:5c:fe:3e:47:b6:15:
+        36:62:06:c0:0c:1e:81:93:01:ef:23:4a:af:b0:bb:b4:fc:79:
+        1c:f0:50:8e:b7:f1:f5:66:ba:c3:a5:dc:e6:1e:33:8c:40:1c:
+        41:b1:56:9b:df:9c:96:60:83:6f:cc:12:14:2e:2a:2d:95:d5:
+        b4:ff
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/lib/hx509/data/kdc.key b/lib/hx509/data/kdc.key
new file mode 100644
index 000000000..f1a76726c
--- /dev/null
+++ b/lib/hx509/data/kdc.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/lib/hx509/data/pkinit.crt b/lib/hx509/data/pkinit.crt
new file mode 100644
index 000000000..509417fe0
--- /dev/null
+++ b/lib/hx509/data/pkinit.crt
@@ -0,0 +1,56 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 6 (0x6)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=hx509 Test Root CA, C=SE
+        Validity
+            Not Before: Apr 28 14:47:49 2006 GMT
+            Not After : Apr 25 14:47:49 2016 GMT
+        Subject: C=SE, CN=pkinit
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:c6:11:3a:3b:b7:f8:d0:aa:bd:84:5c:45:87:2a:
+                    e2:52:bc:e2:f7:d4:5b:ac:c0:79:d0:60:4d:5c:93:
+                    6b:7e:a6:5e:eb:70:f2:6e:59:1d:29:ab:64:ed:f0:
+                    53:3c:31:a6:5c:1d:09:1b:eb:b4:7a:da:18:48:88:
+                    58:f1:74:a3:3b:85:1b:03:02:bb:5e:0e:c1:dd:ca:
+                    d4:ac:6b:45:09:dd:b6:cc:81:a1:6f:42:da:3f:f5:
+                    03:ee:d4:e2:e2:3e:3a:d2:e3:84:60:63:a6:10:46:
+                    e5:6e:fe:2d:8d:27:0b:33:36:6c:18:f8:d4:9d:75:
+                    72:8e:d3:fe:e5:45:26:f9:39
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Key Usage: 
+                Digital Signature, Non Repudiation, Key Encipherment
+            X509v3 Subject Key Identifier: 
+                DC:61:31:A6:07:C5:5D:8F:F8:27:30:DD:73:89:07:C0:62:F3:31:59
+            X509v3 Subject Alternative Name: 
+                othername:<unsupported>
+    Signature Algorithm: sha1WithRSAEncryption
+        84:f6:34:44:b1:21:b4:0a:18:f6:5b:47:5a:62:e4:10:a3:5e:
+        e0:ef:da:63:fb:ed:dc:54:0d:da:2f:9b:cd:21:8a:44:13:66:
+        34:12:04:19:84:d8:c5:fd:c0:a8:14:4d:7b:e4:60:e1:5d:bc:
+        56:3d:90:04:f9:c9:f6:9c:24:a9:b1:e3:12:bd:f2:54:fc:ac:
+        c0:48:42:1c:94:78:57:ef:e6:71:34:19:7b:f6:71:0c:42:24:
+        b0:f7:7b:9c:88:26:d6:ef:80:4f:f5:2d:ff:a5:6f:98:58:c6:
+        81:77:b2:ae:a1:f5:31:95:9f:29:f3:57:e8:5b:86:b6:65:64:
+        bc:c8
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/lib/hx509/data/pkinit.key b/lib/hx509/data/pkinit.key
new file mode 100644
index 000000000..30d2a3411
--- /dev/null
+++ b/lib/hx509/data/pkinit.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----