diff --git a/lib/hx509/data/gen-req.sh b/lib/hx509/data/gen-req.sh
index 42aef613b..1b59c6676 100644
--- a/lib/hx509/data/gen-req.sh
+++ b/lib/hx509/data/gen-req.sh
@@ -92,6 +92,7 @@ cat test.crt test.key > test.combined.crt
 
 # password protected key
 openssl rsa -in test.key -aes256 -passout pass:foobar -out test-pw.key
+openssl rsa -in pkinit.key -aes256 -passout pass:foo -out pkinit-pw.key
 
 
 openssl ca \
diff --git a/lib/hx509/data/pkinit-pw.key b/lib/hx509/data/pkinit-pw.key
new file mode 100644
index 000000000..c5639b476
--- /dev/null
+++ b/lib/hx509/data/pkinit-pw.key
@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-256-CBC,E97AADA99D6A35DF779C98E861F4EB44
+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-----END RSA PRIVATE KEY-----