# Private keys and device certs — NEVER commit
*.key
*.p12
*.csr
*.srl

# ca.crt and server.crt are public — safe to commit if desired,
# but kept out by default so the repo doesn't become a cert store.
# Uncomment the next two lines to allow committing public certs:
# !ca.crt
# !server.crt
*.crt