1/**
2 * A checked-in, deterministic RSA-2048 Certificate Signing Request for
3 * `origin.alchemy-test-2.us` (CN only). Cloudflare's Origin CA signs the
4 * CSR's public key and binds the certificate to the `hostnames` passed in
5 * the create request (the CSR subject is not authoritative), so the same
6 * CSR can be reused across hostname variations in the tests.
7 *
8 * The matching private key was generated once and intentionally discarded —
9 * the tests only exercise issuance/revocation, never TLS handshakes.
10 */
11export const TEST_CSR = `-----BEGIN CERTIFICATE REQUEST-----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=
25-----END CERTIFICATE REQUEST-----
26`;