[ primary ] private = file://testdata/server.key certificate = testdata/server.crt [ backup ] private = ksm://test-signer certificate = testdata/server.crt
